Expleo Group
Expleo Group
Expleo Group is a global engineering, technology, and consulting partner helping organizations transform operations, develop complex products, and improve manufacturing and quality processes. Its work spans consulting, defense, and logistics, with capabilities in artificial intelligence, digitalization, and cybersecurity. Founded in 1966, Expleo combines more than five decades of experience with a team of 18,000 experts working across 29 countries to support innovation and operational performance.

Security Operations Analyst – Cyber Defense Operations | Expleo Group

Full-time hybrid Security Operations Analyst role with Expleo Group in Spain, supporting a global 24/7 SOC for UNICC. Monitor threats, investigate incidents, improve detection, and help protect critical systems using SIEM, EDR, cloud security, and network analysis.

Description

  • Monitor and assess security alerts from SIEM, EDR, and cloud security platforms
  • Investigate security events and triage potential incidents
  • Review system logs and network communications to identify threats and incidents
  • Support security incident containment, remediation, and recovery activities
  • Escalate incidents according to established procedures
  • Prepare technical reports and document investigation findings
  • Help continuously improve SOC operating procedures and documentation
  • Tune monitoring rules and use cases to reduce false positives and strengthen detection
  • Work closely with Security Operations and Incident Response teams
  • Contribute to a global 24/7 Cyber Security Operations Center alongside cybersecurity specialists worldwide

Requirements

  • More than five years of experience in Security Operations or cybersecurity
  • Previous experience working in a SOC environment
  • Strong knowledge of SIEM and EDR tools
  • Experience investigating and managing security alerts and incidents
  • Knowledge of networking and TCP/IP protocols
  • Experience analyzing Windows, Linux, application, and database logs
  • In-depth knowledge of Microsoft security solutions
  • Experience with or knowledge of cloud security across Azure, AWS, or GCP
  • Fluent English proficiency
  • Incident Response Tier 1 and/or Tier 2 experience is valued
  • Experience with AWS monitoring and security is valued
  • Scripting knowledge in Python, PowerShell, Bash, or Ruby is valued
  • Security certifications such as SC-200, CEH, GCIH, GCFA, GIAC, or equivalent are valued

Benefits

  • Expleo Academy provides opportunities to learn languages and earn technical certifications
  • 24 days of annual leave
  • Additional days off on December 24 and 31
  • Padel and running club
  • Summer and Halloween events
  • Health insurance
  • Meal vouchers
  • Childcare vouchers
  • Hybrid working

Related Jobs