Security Analyst

Location: LATAM - Remote (has to be able to coordinate himself with Spanish team)

Salary: depending on experience and skills

We are looking for a Security Analyst for a cybersecurity consulting and services company (Barcelona-based, international scope) that has been protecting organizations for years across incident response, digital forensics, managed services, threat intelligence, and Red & Purple Team engagements. You will join a growing cybersecurity team focused on building and improving advanced detection capabilities for clients across complex environments.

About the role

As a Security Analyst , you will be part of the DRTI team for MDR (Managed Detection and Response) and MTI (Managed Threat Intelligence) services, playing a key role in threat detection, analysis, and mitigation.

What you’ll do

Your responsibilities will include:

• Monitor and analyze security alerts across EDR/SIEM platforms, identifying suspicious activity and performing initial diagnostics on the origin and scope of threats.
• Analyze threat intelligence , anticipating potential attacks against our clients.
• Respond to detected threats , containing and applying mitigation measures to minimize impact.
• Generate reports and draft notifications , communicating analysis findings and providing recommendations for the client to follow.
• Collaborate on improving detection rules , optimizing detection capabilities and reducing false positives.
• Contribute to the evolution of procedures and playbooks.
• Automate tasks and processes using PowerShell, Python, or Bash scripting.
• Participate in client meetings , including follow-ups to provide insights on analyzed alerts and kickoff sessions to support initial deployment and configuration.

What we’re looking for

• Degree in Engineering or a related field in Cybersecurity, or equivalent demonstrable training/professional experience.
• Minimum of 1 year of experience in security alert analysis on SIEM and/or EDR platforms such as CrowdStrike, Microsoft Sentinel, Cortex, Splunk, Elastic ELK, LogRhythm, QRadar, Chronicle, or Wazuh, among others.
• Knowledge of Windows and UNIX/Linux systems administration.
• Solid understanding of networking and communication protocols , including TCP/IP, DHCP, DNS, and other fundamental protocols.
• Scripting skills (Bash, Python, PowerShell) for task automation and tool development.
• Analytical capacity and logical thinking , with the ability to correlate events, detect attack patterns, and solve complex problems efficiently.
• Attention to detail and a proactive mindset , with the ability to identify anomalies and critically analyze security alerts.
• Organizational and teamwork skills.
• Proficiency in English , with the ability to communicate clearly and effectively in technical environments and with international teams.
• Availability to join the 24/7 on-call rotation , ensuring a fast and efficient response to critical alerts.
• Specialized training , such as certifications or Master’s degrees in Cybersecurity, will be highly valued.

What’s offered

• Join an international, young, and dynamic team with an excellent working environment.
• Remote participation from LATAM under a follow-the-sun modality.
• Close collaboration with Red and Blue Teams to stay up-to-date on real-world attacks and the latest adversarial techniques.
• Access to various detection technologies including EDR, SIEMs, Cyber Intelligence, and other security tools.
• Continuous internal and external training to keep your skills sharp (including certifications and attenda