> Markdown version of [/jobs/ext/1985737-l1-soc-analyst-madrid](https://www.wearedevelopers.com/jobs/ext/1985737-l1-soc-analyst-madrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # L1 Soc Analyst - Madrid - **Company:** Integrity360 - **Location:** Torrejón de Ardoz, Spain - **Contract:** Permanent contract - **Skills:** Cloud Computing, CompTIA Security+, Cyber Security, Log Analysis, Microsoft Security Essentials, PM2, Security Information and Event Management, Office365, Mitre Att&ck, Azure Security Center, Microsoft Sentinel, Servicenow, Vulnerability Analysis - **Published:** August 8, 2026 - **Apply:** https://www.buscojobs.com.es/l-1-soc-analyst-madrid-en-torrejon-de-ardoz-ID-365900118 ## About the Role Demonstrable experience in IT or cybersecurity support, ideally within a SOC or monitoring environment Solid understanding of cybersecurity fundamentals and CIA principles Familiarity with SIEM, EDR/XDR, log analysis, and security monitoring workflows Working knowledge of MITRE ATT&CK and NIST IR processes Strong analytical and investigative thinking Excellent written and verbal communication skills Ability to operate independently within Tier 1 scope Fluent in English Ability to work effectively in a fast-paced environment and prioritize tasks accordingly Certifications/Qualifications (preferred but not required), CompTIA Security+, ISC2, ISACA, SANS or equivalent GIAC Security essentials (GSEC) ## Description Level 1 SOC AnalystTitle: Level 1 SOC AnalystLocation: Madrid, on siteJob type: Full-Time PermanentSalary: Negotiable / DOEAbout UsIntegrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean. With over 700 employees, across 12 locations, and six Security Operations Centres (SOCs)-including locations in Dublin, Sofia, Stockholm, Madrid, Rome and Cape Town-we support more than 2,500 clients across a wide range of industries.Over 80% of our team are technical experts, focused on helping clients proactively identify, protect, detect and respond to threats in an ever-evolving cyber landscape. Our security-first approach positions cyber resilience as a business enabler, empowering organisations to operate with confidence.At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we'd love to hear from you.Job Role / ResponsibilitiesAs a Level 1 SOC Analyst, you will act as the first line of defense, responsible for continuous monitoring, triage, and initial investigation of security events. This role is critical in maintaining security posture and ensuring only high-quality, actionable alerts progress through the SOC pipeline.Primary Duties/Responsibilities include:Monitor security events across oursecurity ecosystem, including:Microsoft SentinelMicrosoft Defender for EndpointDefender for IdentityDefender for Office365Defender for Cloud AppsPerformalert triagewith clear analytical judgement:Validate alertsAssign appropriate severityProvide full investigative context before escalationConductpreliminary investigations:Identify IOCs, affected systems, attack vectors and potential business impactApply frameworks such as MITRE ATT&CK, Cyber Kill Chain, and NIST IR lifecycleMaintain high-qualitydocumentationand case notes within ServiceNow SIRCommunicateeffectively with internal teams and client stakeholdersContribute tocontinuous improvementthrough feedback, tuning suggestions, and knowledge sharingDemonstrate strong commitment to ongoing professional developmentSLA handling/management- Aspire to manage security events in accordance with applicable (response and resolution) SLA's.Desired SkillsDemonstrable experience in IT or cybersecurity support, ideally within a SOC or monitoring environmentSolid understanding of cybersecurity fundamentals and CIA principlesFamiliarity with SIEM, EDR/XDR, log analysis, and security monitoring workflowsWorking knowledge of MITRE ATT&CK and NIST IR processesStrong analytical and investigative thinkingExcellent written and verbal communication skillsAbility to operate independently within Tier 1 scopeFluent in EnglishAbility to work effectively in a fast-paced environment and prioritize tasks accordinglyCertifications/Qualifications (preferred but not required)CompTIA Security+, ISC2, ISACA, SANS or equivalentGIAC Security essentials (GSEC)Blueteam security level 1#LI-PM2 ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)