> Markdown version of [/jobs/ext/1395824-l2-soc-analyst](https://www.wearedevelopers.com/jobs/ext/1395824-l2-soc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# L2 SOC Analyst

- **Company:** Integrity360
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Security Information and Event Management, Mitre Att&ck, Cybercrime, Drilldown, Microsoft Sentinel, ArcSight Event Correlation, Splunk
- **Published:** July 23, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

Minimum 1 year experience in a SOC Tier 1 or security analyst role
Advanced investigative and analytical capability
Strong understanding of modern attack techniques, threat actors, and detection methodologies
Proven experience with SIEM, EDR/XDR, identity, email and cloud security tooling
Excellent technical documentation and communication skills
Ability to manage multiple complex incidents simultaneously
Ability to perform event correlation, host/ network threat analysis.
Ability to manage multiple incidents and make effective decisions under high pressure environment.
Certifications/Qualifications (preferred but not required)
Security industry certifications: SEC+, CYSA+, Net+, SC-200,AZ-500,AZ-900,Splunk Power user
A working knowledge of Intrusion Prevention System (IPS), SIEM, SOAR & DLP is a nice to have.
Experience working with threat hunting tools is nice to have.

## Description

As a L2 SOC Analyst, you will act as a core investigator responsible for deep-dive analysis, incident ownership, and advanced threat handling. You will mentor L1 SOC analysts within the team.
This role is part of a dedicated SOC team , providing analysts with the opportunity to operate within a highly mature security environment, gain exposure to advanced technologies and complex threat scenarios, and develop deep domain expertise in financial services security operations.
Primary Duties/Responsibilities include:
Lead investigation of confirmed and high-risk security incidents
Perform deep-dive analysis using:
Microsoft Sentinel
Microsoft Defender Suite
Trellix
Zscaler
Apply threat intelligence and attacker TTP analysis using:
MITRE ATT&CK
Cyber Kill Chain
NIST IR Lifecycle
Produce high-quality incident reports with actionable recommendations
Coordinate containment and remediation actions with engineering, infrastructure, and client teams
Provide technical guidance and mentorship to Tier 1 analysts
Participate in continuous improvement of SOC processes, playbooks, and detection quality
Maintain exceptional communication with client stakeholders during active incidents
Perform ad-hoc analysis of varied logs, identifying anomalies in customer environments.
Desired Skills


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)