{"id":1536935,"url":"https://alion.io/job/devoteam-soc-analyst-l1-24x7","title":"SOC Analyst L1- 24x7","company":{"id":6640,"name":"Devoteam","domain":"devoteam.com","url":"https://alion.io/company/devoteam","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":78,"open_postings":601,"ghost_share":0.363,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":77000,"max_usd":204000,"period":"year","method":"role_country_seniority_unknown","sample_n":20},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Google SecOps","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Sophos","optional":false}],"status":"live","first_seen_at":"2026-09-30T10:05:24Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-12T19:27:23Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":11},"description":"Devoteam es una consultora europea líder enfocada en estrategia digital, plataformas tecnológicas, ciberseguridad y transformación empresarial a través de la tecnología.\nLa Tecnología está en nuestro ADN y creemos en ella como una palanca capaz de impulsar el cambio para mejorar, manteniendo un equilibrio que nos permite ofrecer a nuestra cartera de clientes herramientas tecnológicas de primer nivel pero siempre con la cercanía y profesionalidad de un equipo que actúa como guía durante el camino.\nDevoteam lleva más de 30 años comprometidos con la tecnología al servicio de las personas. Con más de 10.000 personas en el grupo, en 20 países de Europa, Oriente Medio y África.\n Buscamos un Analista L1 de Centro de Operaciones de Seguridad (SOC) dedicado para unirse a nuestro equipo de ciberseguridad.\nNecesario nivel de inglés B2-C1 (oral, escrito y leído).\nTurnos rotativos de 8 horas Mañana-Tarde-Noche\nTecnologías necesarias:\nExperiencia con plataformas SIEM (Google SecOps, Microsoft Sentinel, PaloAlto XSIAM, CrowdStrike NGSIEM).\n\nConocimiento de metodologías de respuesta a incidentes.\n\nExperiencia con herramientas EDR (CrowdStrike Falcon, Sophos Intercept X, SentinelOne, Microsoft Defender ATP).\n\nFunciones:\nMonitorización de seguridad y triaje/gestión de alertas\nMonitorizar eventos y alertas de seguridad de diversas herramientas, incluyendo SIEM, IDS/IPS, EDR y otras plataformas de seguridad.\n\nRealizar el triaje e identificación inicial de alertas de seguridad basándose en los procedimientos establecidos.\n\nEscalar los incidentes de seguridad verificados a los analistas L2 siguiendo los procedimientos de escalado documentados.\n\nMantener una documentación precisa de todos los eventos de seguridad y de las acciones realizadas.\n\nSoporte en la respuesta a incidentes\nAsistir en las actividades iniciales de respuesta a incidentes bajo supervisión.\n\nRecopilar y preservar evidencias relacionadas con los incidentes de seguridad.\n\nSeguir los playbooks y procedimientos operativos estándar (SOP) establecidos.\n\nComunicar el estado de los incidentes a las partes interesadas correspondientes de manera oportuna.\n\nAnálisis e inteligencia de amenazas\nRevisar y analizar alertas de seguridad para determinar su legitimidad y su impacto potencial.\n\nRealizar búsquedas básicas y enriquecimiento de IoC (Indicadores de Compromiso) utilizando plataformas de inteligencia de amenazas.\n\nApoyar a los analistas L2/L3 con la recopilación de datos durante las actividades de threat hunting cuando se solicite.\n\nMantenerse al tanto del panorama actual de amenazas y de las tendencias emergentes en seguridad.\n\nDocumentación y reportes\nCrear informes detallados de incidentes y mantener una documentación precisa de los casos.\n\nActualizar los sistemas de seguimiento de incidentes de seguridad con la información relevante.\n\nParticipar en las revisiones posteriores a los incidentes y en las sesiones de lecciones aprendidas.\n\nContribuir a los artículos de la base de conocimientos y a la documentación de procedimientos.\n\nInglés B2-C1","description_format":"text","description_chars":3038,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false},{"language":"Spanish","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security","IT Consulting & Digital Transformation","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-09-30T19:19:36Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.858,"p_room":1,"age_days":11,"expected_fill_days":52,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/devoteam-soc-analyst-l1-24x7","json_url":"https://alion.io/job/devoteam-soc-analyst-l1-24x7.json","meta":{"generated_at":"2026-10-12T19:31:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31613,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6640},"rest":"https://alion.io/mcp/rest/get_company?id=6640"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdevoteam-soc-analyst-l1-24x7"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdevoteam-soc-analyst-l1-24x7"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdevoteam-soc-analyst-l1-24x7"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/devoteam-soc-analyst-l1-24x7\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdevoteam-soc-analyst-l1-24x7"}]}