{"id":1895736,"url":"https://alion.io/job/syntegon-senior-soc-analyst","title":"Senior SOC Analyst","company":{"id":52796,"name":"Syntegon","domain":"syntegon.com","url":"https://alion.io/company/syntegon","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":17,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Terrassa, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":57000,"max_usd":118000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GMP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-05T07:06:14Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-21T17:15:09Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Syntegon Telstar S.R.U is a company belonging to the Syntegon Group, which operates worldwide with 7,300 colleagues at 49 locations in over 20 countries.is a company belonging to the Syntegon Group, which operates worldwide.\nAs a brand specialising in the development of GMP consulting, engineering, construction and integrated process equipment projects, we serve companies linked to the life sciences market (pharmaceutical and biotechnology, healthcare, cosmetics, veterinary and food industries), as well as hospitals, laboratories and research centres. We also offer solutions using vacuum and high vacuum technologies for traditional and high-tech industries in the energy and aerospace sectors, as well as scientific experimentation.\n We are looking for a Senior SOC Analyst to join our team at our offices in Terrassa (Barcelona).\nIn this Tier 3 role, you’ll lead the detection, triage, investigation, and response to complex security threats across the organization while serving as a key technical escalation point for critical incidents.\nYou’ll also mentor junior analysts, improve SOC processes, strengthen detection and response capabilities, and help drive the continued maturity of our security operations. The ideal candidate brings deep knowledge of the threat landscape, strong incident response expertise, and a passion for building an effective, collaborative, and resilient SOC.\nKey Responsibilities\nLead the triage, investigation, and escalation of complex or high-severity security alerts across endpoint, network, identity, cloud, and application domains.\nDrive end-to-end incident response for significant security events, coordinating across IT, Cloud, Identity, and business stakeholders and producing thorough incident reports with root cause analysis and remediation recommendations.\nConduct proactive threat hunts based on intelligence and known adversary TTPs, identifying detection gaps and working with the SOC Engineer to translate findings into improved detection content.\nLeverage SOAR platforms to execute and refine automated response workflows, identifying repetitive tasks and escalating automation opportunities to the SOC Engineer.\nDevelop and maintain IR playbooks, runbooks, and SOPs, contributing to process improvements based on lessons learned and operational gaps.\nAct as a coach and escalation point for Tier 1-2 analysts, contributing to training, knowledge sharing, and a culture of continuous learning.\nEnsure incident handling aligns with relevant compliance requirements and maintain accurate, audit-ready case records and evidence documentation throughout the investigation lifecycle.\n Required Qualifications:\n4-6+ years in cybersecurity with 3+ years in a SOC analyst or incident response role.\nDeep understanding of the incident response lifecycle with proven experience handling complex, multi-domain security incidents.\nStrong knowledge of attacker TTPs, threat actor behaviour, and the MITRE ATT&CK framework.\nSolid analytical skills across endpoint, network, identity, and cloud attack vectors.\nFamiliarity with SOAR platforms and experience working within automated triage and response workflows.\nUnderstanding of threat intelligence concepts and how to apply them to detection and investigation.\nStrong written and verbal communication skills with the ability to produce clear incident reports for both technical and non-technical audiences.\nPreferred Qualifications:\nCertifications: GIAC (GCIH, GCFA, GCFE, GCIA, GMON), CISSP, or equivalent industry certifications.\nExperience with threat hunting methodologies and proactive adversary detection techniques.\nExposure to scripting or automation concepts (e.g., Python, PowerShell) to support workflow improvements.\nExperience working within or alongside MSSP/MDR environments.\nFamiliarity with forensic analysis, malware triage, or reverse engineering.\nExposure to data privacy, eDiscovery, and chain-of-custody requirements during investigations.\n We kindly ask you to apply in English.\nAvailability to travel (approximately 10-20%) when required (HQ in Germany).\nPor Syntegon y sus subsidiarias, la diversidad es una preocupación clave. Exclusivamente promovemos un ambiente donde todos los empleados, independientemente de su género, edad, origen, religión, orientación sexual, identidad de género o necesidades especiales, sean tratados de manera equitativa. Si esta oferta de trabajo utiliza únicamente la forma masculina, es por razones de legibilidad y se refiere a individuos de todos los géneros.","description_format":"text","description_chars":4518,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Industrial Machinery","Packaging & Labeling"],"lifecycle":[{"event":"open","at":"2026-10-05T08:17:01Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.604,"p_room":0.9,"age_days":15,"expected_fill_days":31,"reasons":["conf:2","stale_co","velocity","win:mid"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/syntegon-senior-soc-analyst","json_url":"https://alion.io/job/syntegon-senior-soc-analyst.json","meta":{"generated_at":"2026-10-21T20:42:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29466,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52796},"rest":"https://alion.io/mcp/rest/get_company?id=52796"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsyntegon-senior-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsyntegon-senior-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsyntegon-senior-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/syntegon-senior-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsyntegon-senior-soc-analyst"}]}