> Markdown version of [/jobs/ext/3018641-analista-de-seguridad-soc-l2-turnos-rotativos-hibrido](https://www.wearedevelopers.com/jobs/ext/3018641-analista-de-seguridad-soc-l2-turnos-rotativos-hibrido). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Analista de Seguridad SOC L2 (Turnos Rotativos), hibrido

- **Company:** Devoteam
- **Location:** Spain
- **Contract:** Permanent contract
- **Skills:** ARM Architecture, Cyber Security, Query Languages, Python (Programming Language), Windows PowerShell, Kusto Query Language, Security Information and Event Management, SQL Databases, Scripting, Microsoft Sentinel, SentinelOne Expertise
- **Published:** September 21, 2026
- **Apply:** https://www.empleate.gob.es/empleo/#/oferta/1857663316

## About the Role

disponibilidad para guardias pagadas fuera de turno. SIEM, SOAR, Palo Alto, Sentinel

## Description

Automatizar tareas de detección y respuesta mediante scripting (Python / PowerShell). - Dar soporte y mentoría técnica a los analistas L1. Qualifications Requisitos mínimos - Experiencia: 2 a 4 años en SOC, con al menos 1 año en rol L2. - Plataformas: Experiencia práctica demostrable en al menos 2 de las siguientes tecnologías: Google Chronicle SecOps, Palo Alto XSIAM, CrowdStrike NG-SIEM o Microsoft Sentinel. - EDR/XDR: Manejo de CrowdStrike Falcon, Defender for Endpoint, SentinelOne, Cortex XDR o Sophos. - Lenguajes de consulta: Dominio de KQL, SPL o SQL. - Idiomas: Inglés C1/C2 (uso diario con clientes internacionales). Se valorará muy positivamente - Conocimiento profundo de la matriz MITRE ATT CK y desarrollo de scripts (Python/PowerShell). - Certificaciones del sector: SC-200, GCIH, CySA+, entre otras. Additional Information - Modalidad: Híbrido (Tres Cantos, Madrid). - Horario: Turnos de mañana o tarde +


## Related Videos

- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1520-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)