Security Operations Analyst (Cyber Defense Operations)
Pragmatike · Remote · Spain · Bari · Brindisi · Lecce · Greece · Valencia · Elche · Poland · Portugal · Italy · France / Paris ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Hybrid or Remote (EMEA)
- 6-month contract
- SOC experience required
- SIEM and EDR focus
- Fluent English
Join a global Cybersecurity Operations team as a Security Operations Analyst. You will work in a 24/7 Security Operations Centre, handling alert triage, threat investigation, and incident response for enterprise, cloud, and endpoint systems.
What you'll do
- Triage and investigate security alerts via SIEM, EDR, and cloud tools
- Analyze host and network logs from diverse infrastructure sources
- Determine root causes of suspicious activity and recommend remediation
- Support incident response, recovery, and threat management activities
- Tune detection rules to improve quality and reduce false positives
- Prepare technical reports and update SOC documentation and procedures
What you'll need
- At least 5 years of IT or cybersecurity experience
- Proven hands-on experience working in a SOC environment
- Strong proficiency with SIEM and EDR platforms
- Advanced log analysis skills for Windows, Linux, and databases
- Knowledge of Microsoft Sentinel, Defender, and cloud security
- Experience with Azure, AWS, or GCP security monitoring
- Familiarity with Splunk, QRadar, ArcSight, or ELK stacks
- Fluent English with strong written and verbal communication
Nice to have
- Experience in Tier-1 or Tier-2 Incident Response teams
- AWS security monitoring across IaaS, PaaS, or SaaS
- Scripting skills in Python, PowerShell, Bash, or Ruby
- Relevant certifications like SC-200, GCIH, CEH, or CCNA
- Previous customer-facing cybersecurity experience
Stack
- Microsoft Sentinel
- Microsoft Defender
- Splunk
- QRadar
- ArcSight
- ELK
- CrowdStrike
- Azure
- AWS
- GCP
- Linux
- Windows
- macOS
How you'll work
- Full-time contract for 6 months with potential extension
- Based in Valencia, Spain, or remote across EMEA
- Part of a global 24/7 Security Operations Centre
- Collaboration with distributed cybersecurity specialists