> Markdown version of [/jobs/ext/2024961-soc-analyst-rapid-alert-triage-clear-escalations](https://www.wearedevelopers.com/jobs/ext/2024961-soc-analyst-rapid-alert-triage-clear-escalations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Soc Analyst: Rapid Alert Triage & Clear Escalations

- **Company:** Happyrobot Inc.
- **Location:** Barcelona, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Security Information and Event Management, Mitre Att&ck, Blue Team (Cyber Security)
- **Published:** August 11, 2026
- **Apply:** https://www.buscojobs.com.es/soc-analyst-rapid-alert-triage-clear-escalations-en-barcelona-ID-367010664

## About the Role

You will analyze logs across cloud, identity, and endpoints, using MITRE ATT&CK as a reference frame to interpret signals and escalate with complete context.
The role requires 2-3 years in a blue team/detection role, hands-on SIEM/EDR triage experience, and clear English incident notes.
#J-*****-Ljbffr

## Description

HappyRobot is seeking a SOC Analyst to own alert triage during coverage hours, prioritizing high-severity alerts and documenting context for engineering action.You will analyze logs across cloud, identity, and endpoints, using MITRE ATT&CK as a reference frame to interpret signals and escalate with complete context.The role requires 2-3 years in a blue team/detection role, hands-on SIEM/EDR triage experience, and clear English incident notes.#J-*****-Ljbffr


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Climate vs. Weather: How Do We Sustainably Make Software More Secure?](https://www.wearedevelopers.com/videos/357-climate-vs-weather-how-do-we-sustainably-make-software-more-secure)
- [Handling incidents collaboratively is like solving a rubix cube](https://www.wearedevelopers.com/videos/680-handling-incidents-collaboratively-is-like-solving-a-rubix-cube)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)