> Markdown version of [/jobs/ext/1679962-cyber-soc-l2-senior-ey-gds-spain-hybrid](https://www.wearedevelopers.com/jobs/ext/1679962-cyber-soc-l2-senior-ey-gds-spain-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Soc L2 - Senior - Ey Gds Spain - Hybrid

- **Company:** Ey (Ernst U0026 Young)
- **Location:** Málaga, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Perl (Programming Language), Regular Expressions, Standard Sql, Security Information and Event Management, Splunk
- **Published:** July 31, 2026
- **Apply:** https://www.buscojobs.com.es/cyber-soc-l-2-senior-ey-gds-spain-hybrid-en-malaga-ID-364231429

## About the Role

You will engage with clients to ensure effective communication and near real-time analysis across multiple customers.
This is a hands-on, cross-functional role with opportunities to shape security monitoring and incident response capabilities.Compensaciones / Beneficios* Operate and troubleshoot SIEM/EDR/NSM solutions for multiple customers (e.g., Splunk, Sentinel, CrowdStrike Falcon LogScale; Fidelis, ExtraHop)* Perform second-level incident validation and in-depth investigations* Coordinate and communicate with clients to ensure containment, eradication and recovery* Produce adhoc reports and support SIEM-related troubleshooting* Advise customers on how to maximize solution use and achieve end-state requirements* Deliver near real-time analysis, investigation, remediation, and tracking of security activities for clientsResponsabilidades* Minimum 3 years hands-on experience in SIEM/EDR/NSM* B. Tech.
xqbhyrx / B.E. with technical skills* Ability to work 24x7 shifts* Strong English (verbal and written)* Technical acumen and critical thinking abilities* Strong interpersonal and presentation skills* RegEx, Perl scripting and SQL knowledge* Certifications in SIEM platforms and additional security certs (CSA, CEH, CISSP, GCIH, GIAC)Requisitos principales* Support, coaching and feedback from colleagues* Opportunities to develop new skills and progress your career* Freedom and flexibility to handle your role* Interdisciplinary environment with knowledge exchangeHay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

## Description

Experteer Overview Todas las habilidades, cualificaciones y experiencia relevantes que necesitará un candidato seleccionado se enumeran en la siguiente descripción.In this role, you help detect and respond to security incidents for EY clients using SIEM, EDR and NSM tools.You work within the EY cyber security team to validate incidents, coordinate containment and recovery, and provide guidance on best practices.You will engage with clients to ensure effective communication and near real-time analysis across multiple customers.This is a hands-on, cross-functional role with opportunities to shape security monitoring and incident response capabilities.Compensaciones / Beneficios* Operate and troubleshoot SIEM/EDR/NSM solutions for multiple customers (e.g., Splunk, Sentinel, CrowdStrike Falcon LogScale; Fidelis, ExtraHop)* Perform second-level incident validation and in-depth investigations* Coordinate and communicate with clients to ensure containment, eradication and recovery* Produce adhoc reports and support SIEM-related troubleshooting* Advise customers on how to maximize solution use and achieve end-state requirements* Deliver near real-time analysis, investigation, remediation, and tracking of security activities for clientsResponsabilidades* Minimum 3 years hands-on experience in SIEM/EDR/NSM* B. Tech.xqbhyrx / B.E. with technical skills* Ability to work 24x7 shifts* Strong English (verbal and written)* Technical acumen and critical thinking abilities* Strong interpersonal and presentation skills* RegEx, Perl scripting and SQL knowledge* Certifications in SIEM platforms and additional security certs (CSA, CEH, CISSP, GCIH, GIAC)Requisitos principales* Support, coaching and feedback from colleagues* Opportunities to develop new skills and progress your career* Freedom and flexibility to handle your role* Interdisciplinary environment with knowledge exchangeHay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [How building an industry DBMS differs from building a research one](https://www.wearedevelopers.com/videos/768-how-building-an-industry-dbms-differs-from-building-a-research-one)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Analytics in the Age of Agentic AI: A tour of ClickHouse and Langfuse](https://www.wearedevelopers.com/videos/100240-analytics-in-the-age-of-agentic-ai-a-tour-of-clickhouse-and-langfuse)

## Related Articles

- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)