---
title: 'SOC Engineer at Happyrobot Inc.'
canonical: 'https://feeny.ai/job/soc-engineer-happyrobot-inc-madrid-wy4z732jj535'
type: 'job'
last_seen: '2026-09-06'
---

# SOC Engineer at Happyrobot Inc.

- **Company:** [Happyrobot Inc.](https://feeny.ai/companies/happyrobot-inc)
- **Location:** Madrid, Spain
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-08-06
- **Last confirmed live:** 2026-09-06
- **Apply:** https://jobs.ashbyhq.com/happyrobot.ai/76592a14-99a0-43ca-8049-f67be5086aa3

## Job description

## ABOUT HAPPYROBOT

HappyRobot is the infrastructure for enterprises to build and orchestrate AI workforces. Our AI workers don't just communicate through voice and email - they make decisions, take action, and run operations autonomously across entire enterprise systems. Born in Y Combinator (S23) and backed by a16z, Base10, Prysm Capital and Eurazeo with over $150M raised, we power critical operations for global enterprises worldwide.

Our platform is battle-tested in the most demanding environments, where AI has real consequences. We started in logistics, built our own voice stack, models, and orchestration layer from the ground up, and are now bringing that infrastructure to every enterprise that runs the real economy. Learn more about our vision in our manifesto. https://www.happyrobot.ai/blog/manifesto

## ROLE OVERVIEW

We are looking for a SOC Engineer to join our team. You will build and own our detection and response capability from the ground up — bringing the engineering depth and operational discipline to establish real monitoring across our cloud and identity stack, reduce mean-time-to-detect on security events, and set a foundation that scales into whatever SOC model we choose.

This is not an analyst role. Your deepest strength is detection engineering: designing high-signal detections mapped to ATT&CK, managing the tuning loop that keeps false positive rates in check, and building the log pipeline that makes everything else possible. That said, you operate end-to-end — you investigate alerts yourself, write runbooks an analyst can execute without hand-holding, and automate the repetitive work out of existence.

## What You'll Do

- Detection Engineering Design, write, and tune detections mapped to MITRE ATT&CK techniques. Own the false-positive loop — track noise per detection, tune aggressively, and grow coverage across prioritized techniques quarter over quarter. Detections should be high-signal from the start, not high-volume problems to manage later.
- Log Pipeline Engineering Onboard, parse, and normalize log sources into the SIEM reliably. Get all tier-1 sources live within the first two quarters and keep the pipeline clean as new sources are added. Deep familiarity with cloud and identity logs — CloudTrail, GuardDuty, Kubernetes audit logs, Okta — is the foundation this work is built on.
- Incident Triage & Response Investigate alerts end-to-end. Escalate with clear severity reasoning, complete timeline, and actionable context. Don't hand off half-investigated alerts — own the triage process through to a clear disposition.
- Automation Script enrichment, response actions, and repetitive SOC tasks in Python or Go. If something is done manually more than twice, it should be automated. Reduce toil systematically rather than absorbing it.
- Runbooks & Documentation Write triage runbooks for all high and critical alert types — documented well enough that an analyst can execute them without asking for clarification. Keep runbooks current as detections and infrastructure evolve.
- SOC Foundation Build the monitoring capability that positions us to make an informed in-house vs. hybrid SOC decision by end of September. The architecture, coverage, and process you establish now directly shapes what that model looks like.

Must Have

- 3–5 years in detection engineering, SOC engineering, or blue team roles.
- Hands-on experience building detections in a modern SIEM — RunReveal, Panther, Elastic, Splunk, Sentinel, or similar — not just operating one.
- Deep familiarity with cloud and identity log sources: CloudTrail, GuardDuty, Kubernetes audit logs, and IdP/Okta logs.
- Scripting and automation proficiency in Python or Go.
- Experience mapping detections to MITRE ATT&CK.
- English B2+ (professional working proficiency).

## Nice to Have

- Detections-as-code with detection content managed in Git and deployed via CI/CD.
- EDR experience with SentinelOne or CrowdStrike.
- Incident response experience beyond triage.
- CNAPP exposure (Wiz or similar) and cloud security fundamentals.
- Certifications: GCIA, GCDA, GCIH, or BTL2.
- Prior experience at a SaaS or tech startup building monitoring from scratch.

WHY JOIN US?

- Join a world-class team of engineers and builders.
- Backed by top investors including a16z, Y Combinator, Base10, Prysm Capital and Eurazeo.
- Have ownership and autonomy of projects and are encouraged to ship.
- Comprehensive Benefits including healthcare, dental, vision coverage.
- Competitive salary + equity in a high-growth startup.

Our Operating Principles

Extreme Ownership

We take full responsibility for our work, outcomes, and team success. No excuses, no blame-shifting — if something needs fixing, we own it and make it better. This means stepping up, even when it’s not “your job.” If a ball is dropped, we pick it up. If a customer is unhappy, we fix it. If a process is broken, we redesign it. We don’t wait for someone else to solve it — we lead with accountability and expect the same from those around us.

Craftsmanship

Putting care and intention into every task, striving for excellence, and taking deep ownership of the quality and outcome of your work. Craftsmanship means never settling for “just fine.” We sweat the details because details compound. Whether it’s a product feature, an internal doc, or a sales call — we treat it as a reflection of our standards. We aim to deliver jaw-dropping customer experiences by being curious, meticulous, and proud of what we build — even when nobody’s watching.

We are “majos” Be friendly & have fun with your coworkers. Always be genuine & honest, but kind. “Majo” is our way of saying: be a good human. Be approachable, helpful, and warm. We’re building something ambitious, and it’s easier (and more fun) when we enjoy the ride together. We give feedback with kindness, challenge each other with respect, and celebrate wins together without ego.

Urgency with Focus Create the highest impact in the shortest amount of time. Move fast, but in the right direction. We operate with speed because time is our most limited resource. But speed without focus is chaos. We prioritize ruthlessly, act decisively, and stay aligned. We aim for high leverage: the biggest results from the simplest, smartest actions. We’re running a high-speed marathon — not a sprint with no strategy.

Talent Density and Meritocracy Hire only people who can raise the average; ‘exceptional performance is the passing grade.’ Ability trumps seniority. We believe the best teams are built on talent density — every hire should raise the bar. We reward contribution, not titles or tenure. We give ownership to those who earn it, and we all hold each other to a high standard. A-players want to work with other A-players — that’s how we win.

First-Principles Thinking Strip a problem to physics-level facts, ignore industry dogma, rebuild the solution from scratch. We don’t copy-paste solutions. We go back to basics, ask why things are the way they are, and rebuild from the ground up if needed. This mindset pushes us to innovate, challenge stale assumptions, and move faster than incumbents. It’s how we build what others think is impossible.

The personal data provided in your application and during the selection process will be processed by Happyrobot, Inc., acting as Data Controller.

By sending us your CV, you consent to the processing of your personal data for the purpose of evaluating and selecting you as a candidate for the position. Your personal data will be treated confidentially and will only be used for the recruitment process of the selected job offer.

In relation to the period of conservation of your personal data, these will be eliminated after three months of inactivity in compliance with the GDPR and legislation on the protection of personal data.

If you wish to exercise your rights of access, rectification, deletion, portability or opposition in relation to your personal data, you can do so through security@happyrobot.ai subject to the GDPR.

For more information, visit https://www.happyrobot.ai/privacy-policy https://www.happyrobot.ai/privacy-policy

By submitting your request, you confirm that you have read and understood this clause and that you agree to the processing of your personal data as described.

## About Happyrobot Inc.

## Company Overview
- **One-liner**: HappyRobot builds an AI-native operating system that deploys autonomous AI workers to handle complex, real‑time enterprise workflows across voice, chat, and back‑office functions.
- **Entity Type**: Private (Series B‑II)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2023
- **Founders**: Pablo Palafox (Co‑Founder & CEO), Luis Paarup (Co‑Founder)

## Core Business
- **Primary Industry**: Enterprise AI / Workforce Automation; initial focus on supply chain, logistics, and retail.
- **Target Customers**: B2B Enterprise – complex enterprises with high‑stakes, exception‑ridden operations (e.g., logistics providers, industrial‑scale companies).
- **Mission**: “Empower people to do their best work – by automating the rest” – closing the gap between intelligence and action with real‑time autonomy and enterprise‑grade speed. [happyrobot.ai](https://www.happyrobot.ai/company/about)

## Products & Services
- **HappyRobot Platform**: A multi‑agent system that allows enterprises to build, orchestrate, and deploy AI workers (voice, chat, email, message, document processing, data entry) that integrate with existing systems, manage conversations, and log data in real time. Includes a custom “control tower” for human‑AI collaboration. [happyrobot.ai](https://www.happyrobot.ai/)
- **Deployment & Customization**: Fully custom technology built on top of existing enterprise systems, enabling granular workflow logic and exception handling. The platform learns from every deployment, compounding intelligence across the organisation.

## Market Standing
- **Valuation / Market Cap**: Not publicly disclosed.
- **Key Metric**: Total funding of **$60.8M** (Series B‑II of $44M led by Base10 Partners in October 2025, Series A of $15.6M led by Andreessen Horowitz in December 2024, plus earlier seed and grant rounds). [linkedin.com](https://www.linkedin.com/company/happyrobot)
- **Notable Investors / Partners**: Andreessen Horowitz, Base10 Partners, NTT DoCoMo Ventures, Y Combinator, Array Ventures, Avra, and 20+ others. Trusted by 150+ enterprises including DHL and Ryder. [cbinsights.com](https://www.cbinsights.com/company/happyrobot)
- **Growth Signals**: 111 employees (**+353% YoY** headcount growth); 31k LinkedIn followers (+190% YoY); active job postings increased 625% YoY; offices in 8 cities across 3 continents (San Francisco, Chicago, New York, Mexico City, Madrid, Barcelona, London, Sydney). [linkedin.com](https://www.linkedin.com/company/happyrobot)

## Competitive Advantages
- **Real‑world Battle‑testing**: Deployed in high‑stakes, exception‑rich enterprise environments (logistics, supply chain) where failure has real consequences.
- **Multi‑agent Learning**: When one agent learns and improves, all agents benefit – a compounding intelligence model.
- **Enterprise‑grade Customisation**: Fully custom technology built on top of existing systems, not a one‑size‑fits‑all solution.
- **Autonomous Execution**: Reports 78% autonomous execution on critical work, with human oversight only when needed. [happyrobot.ai](https://www.happyrobot.ai/)
- **Global Presence**: Operates in 11 countries with a distributed, multicultural team.

## Strategic Focus
- **Scale Across Regions & Business Units**: Deploying the platform globally, expanding into additional functions within existing enterprise customers.
- **Deepen Enterprise Super Intelligence**: Continuously improving agent behaviour through technical and behavioural benchmarks, and capturing granular logic across every workflow.
- **Hire Exceptional Talent**: Prioritising talent density and meritocracy to accelerate product development and deployment.

## Why Work Here
- **Culture & Values**: “Majos” culture – helpful, warm, low‑ego. Core values: extreme ownership, talent density/meritocracy, urgency with focus, first‑principles thinking, and craftsmanship. [careers.happyrobot.ai](https://careers.happyrobot.ai/)
- **Work Environment**: Hybrid / remote‑friendly (some roles are location‑specific; many are remote or based in one of eight offices). The team comes from ambitious companies like Palantir, Scale AI, Samsara, Uber, AWS, etc. [linkedin.com](https://www.linkedin.com/company/happyrobot)
- **Growth & Impact**: Join a rapidly scaling company (353% YoY headcount growth) that is redefining how enterprise work gets done. High ownership and direct impact on product and customers.
- **Open Roles**: 87 active job postings (as of mid‑2026) spanning Engineering (ML, Infrastructure, Forward Deployed), Go‑to‑Market (Enterprise AE, SDR), and Operations (Data Ops, Deployment Strategist). [linkedin.com](https://www.linkedin.com/company/happyrobot)

## Sources
1. [happyrobot.ai](https://www.happyrobot.ai/)
2. [careers.happyrobot.ai](https://careers.happyrobot.ai/)
3. [cbinsights.com](https://www.cbinsights.com/company/happyrobot)
4. [linkedin.com](https://www.linkedin.com/company/happyrobot)
5. [happyrobot.ai/about](https://www.happyrobot.ai/company/about)

## Other roles at Happyrobot Inc.

- [Product Operations Engineer](https://feeny.ai/job/product-operations-engineer-happyrobot-inc-san-francisco-g2camggsh2k8) — San Francisco, CA
- [PR & Communications Manager](https://feeny.ai/job/pr-communications-manager-happyrobot-inc-san-francisco-sdvr5n2zkjgq) — San Francisco, CA
- [Forward Deployed Engineer](https://feeny.ai/job/forward-deployed-engineer-happyrobot-inc-dubai-nrms99xktmfs) — Dubai, United Arab Emirates
- [Strategic Account Executive - Portugal](https://feeny.ai/job/strategic-account-executive-portugal-happyrobot-inc-portugal-gkdhw5j51jx2) — Portugal
- [Brand Designer](https://feeny.ai/job/brand-designer-happyrobot-inc-san-francisco-cpna4hq0gdm7) — San Francisco, CA
- [Strategic Account Executive - Italy](https://feeny.ai/job/strategic-account-executive-italy-happyrobot-inc-italy-dab8kaj7rn8t) — Italy
- [Data Scientist](https://feeny.ai/job/data-scientist-happyrobot-inc-barcelona-vc7np7d5pnhb) — Barcelona, Spain
- [Machine Learning Engineer](https://feeny.ai/job/machine-learning-engineer-happyrobot-inc-san-francisco-t1bdy21trsfg) — San Francisco, CA
- [Forward Deployed Engineer](https://feeny.ai/job/forward-deployed-engineer-happyrobot-inc-london-xzazswqbww4k) — London, United Kingdom
- [Cloud Security Engineer](https://feeny.ai/job/cloud-security-engineer-happyrobot-inc-madrid-skm8adjf2h38) — Madrid, Spain