Junior SOC Analyst – Remote (Spain or Portugal)
5 hours ago
Alicante
pbJunior SOC Analyst – Remote (Spain or Portugal) /b /ppSince 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. /ppbr/ppbOur mission: Securing Together! /b /ppbr/ppWe believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. /ppbr/ppAs part of our growing team, we're seeking a Junior SOC Analyst to join us fully remotely from Spain or Portugal. This role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month. /ppbr/ppbYour Role /b /ppbr/ppYou are the SOC's first line of defense, responsible for real-time monitoring, initial triage, and escalation. You'll develop your skills within an integrated security ecosystem spanning SIEM, EDR, DLP, and NIDS tools, with a strong focus on AWS cloud environments and phishing incident response. You'll contribute directly to the SOC's mission of rapid detection and response — from anywhere in Spain or Portugal. /ppbr/ppbYour Responsibilities /b /ppbr/pulliMonitor alerts and identify potential threats across cloud and on-premise environments, with particular attention to AWS workloads. /liliTriage, analyze, and document phishing incidents as a core part of daily operations — including email header analysis, URL/attachment inspection, and user reporting workflows. /liliPerform initial enrichment and escalation of suspicious activity to L2/L3 analysts when thresholds are met. /liliFollow established playbooks and SOPs to ensure consistent and reliable triage. /liliParticipate in simulations, training, and certification pathways to build expertise. /liliMaintain dashboards, metrics, and shift logs to support SOC visibility and reporting. /li /ulpbr/ppbWhat You Bring /b /ppbr/pulli1–3 years of experience in security operations or a related field. /liliHands-on or academic exposure to SIEM/EDR monitoring and escalation practices. /liliFamiliarity with AWS environments and cloud security concepts (IAM, CloudTrail, GuardDuty, etc.) is a strong plus. /liliExperience handling phishing incidents — analysis, containment, and user communication. /liliEagerness to learn and grow within a fast-paced, fully remote SOC environment. /liliStrong analytical, communication, and teamwork skills — autonomy and written clarity are key when working remotely. /li /ulpbr/ppbPreferred Certifications: /b BTL1–2, CompTIA Security+, AWS Cloud Practitioner or AWS Security Specialty, working toward GIAC (GSEC or GCIA) /ppbr/ppbWhy Join Squad? /b /pullibPersonalized Growth: /b We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience. /lilibExpertise Development: /b Participate in internal events like our MixYourTalent webinars and monthly CTF sessions. /lilibVisibility: /b Attend major industry conferences and contribute to our #TheExpert technical blog. /lilibCulture: /b Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie — even remotely. /li /ul