> Markdown version of [/jobs/ext/1594647-associate-soc-analyst-threat-triage-monitoring](https://www.wearedevelopers.com/jobs/ext/1594647-associate-soc-analyst-threat-triage-monitoring). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Associate SOC Analyst: Threat Triage & Monitoring

- **Company:** NCC Group
- **Location:** Madrid, Spain
- **Salary:** €28,000.0 - €42,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Intrusion Detection Systems, Security Information and Event Management, Cyber Threat Analysis, Vulnerability Analysis
- **Published:** July 17, 2026
- **Apply:** https://www.jobleads.com/es/job/ed3edd3ee7b1b2f228dcd47babc228db7

## About the Role

Ideal candidates bring foundational cybersecurity knowledge, familiarity with SIEM tools, and a commitment to continuous learning in a fast-paced security environment.

## Description

NCC Group in Madrid is seeking an Associate SOC Analyst to join the Event Monitoring Centre. You will triage security alerts, perform basic vulnerability analysis, and monitor SIEM, IDS, and threat intel sources. You will escalate confirmed threats to R2 analysts and assist with incident response and documentation.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)