{"id":1895737,"url":"https://alion.io/job/syntegon-senior-soc-engineer","title":"Senior SOC Engineer","company":{"id":52796,"name":"Syntegon","domain":"syntegon.com","url":"https://alion.io/company/syntegon","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":15,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Terrassa, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":54000,"max_usd":123000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":1655},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-05T07:04:27Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-16T03:15:06Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Syntegon Telstar S.R.U is a company belonging to the Syntegon Group, which operates worldwide with 7,300 colleagues at 49 locations in over 20 countries.is a company belonging to the Syntegon Group, which operates worldwide.\nAs a brand specialising in the development of GMP consulting, engineering, construction and integrated process equipment projects, we serve companies linked to the life sciences market (pharmaceutical and biotechnology, healthcare, cosmetics, veterinary and food industries), as well as hospitals, laboratories and research centres. We also offer solutions using vacuum and high vacuum technologies for traditional and high-tech industries in the energy and aerospace sectors, as well as scientific experimentation.\n We are looking for a hands-on Senior SOC Engineer to join our team at our offices in Terrassa (Barcelona) to help design, build, and continuously improve the technology that powers our Security Operations Center. In this role, you’ll own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines-developing high-fidelity detections, efficient workflows, and resilient security data infrastructure.\nWorking closely with the SOC Leader and analyst teams, you’ll serve as a technical escalation point for complex incidents and help strengthen the SOC through automation, process improvement, and reliable engineering solutions. The ideal candidate combines strong security engineering expertise with a practical, collaborative approach and a passion for enabling analysts to respond more effectively.\n Key Responsibilities\nDesign, develop, and maintain detection content across SIEM, EDR/XDR, and NDR platforms, aligned to MITRE ATT&CK TTPs, owning the full use case lifecycle from requirements through to tuning and deprecation.\nBuild and optimise SOAR playbooks and automated response workflows, identifying and implementing automation opportunities across triage, enrichment, containment, and evidence collection.\nOwn the onboarding of new log sources and manage data ingestion pipelines for cost-effectiveness, completeness, and reliability.\nAct as Tier 3 technical escalation for complex investigations and high-severity incidents, supporting forensic analysis, malware triage, and root cause determination.\nMaintain the health, performance, and reliability of core SOC platforms and evaluate new tooling aligned to the SOC's maturity roadmap.\nPartner with IT, Cloud, Network, and Identity teams to improve log coverage and response integration, and mentor Tier 1-2 analysts on detection logic and tooling.\nEnsure detection and engineering controls support relevant compliance requirements and maintain audit-ready documentation across platforms and pipelines.\n Required Qualifications:\n5-8+ years in cybersecurity with 3+ years in a SOC engineering, detection engineering, or senior analyst role.\nDeep hands-on expertise with SIEM platforms including query authoring and detection rule development.\nProven experience building SOAR playbooks and automating security workflows.\nStrong knowledge of attacker TTPs and the MITRE ATT&CK framework, with the ability to translate them into detection logic.\nExperience with log onboarding, data normalisation, and pipeline management at scale.\nSolid understanding of EDR/XDR, NDR, cloud telemetry, and identity signals.\nScripting or development skills (e.g., Python, PowerShell, KQL) for automation and tooling integration.\nClear written and verbal communication with the ability to document technical content for varied audiences.\nPreferred Qualifications:\nCertifications: GIAC (GCIA, GCED, GCIH, GCFA, GMON), Microsoft SC-200, or equivalent cloud security certifications.\nExperience with threat hunting methodologies and proactive adversary detection.\nExposure to offensive security, red teaming, or purple team exercises.\nExperience in OT/ICS security environments (if relevant to the business).\nFamiliarity with data privacy, eDiscovery, and chain-of-custody requirements during investigations.\n We kindly ask you to apply in English.\nAvailability to travel (approximately 10-20%) when required (HQ in Germany).\nPor Syntegon y sus subsidiarias, la diversidad es una preocupación clave. Exclusivamente promovemos un ambiente donde todos los empleados, independientemente de su género, edad, origen, religión, orientación sexual, identidad de género o necesidades especiales, sean tratados de manera equitativa. Si esta oferta de trabajo utiliza únicamente la forma masculina, es por razones de legibilidad y se refiere a individuos de todos los géneros.","description_format":"text","description_chars":4554,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Industrial Machinery","Packaging & Labeling"],"lifecycle":[{"event":"open","at":"2026-10-05T08:17:01Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.592,"p_room":1,"age_days":9,"expected_fill_days":31,"reasons":["conf:0","stale_co","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/syntegon-senior-soc-engineer","json_url":"https://alion.io/job/syntegon-senior-soc-engineer.json","meta":{"generated_at":"2026-10-16T05:08:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2320,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52796},"rest":"https://alion.io/mcp/rest/get_company?id=52796"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsyntegon-senior-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsyntegon-senior-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsyntegon-senior-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/syntegon-senior-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsyntegon-senior-soc-engineer"}]}