Security Operations Analyst - Defence Operations

QCS Staffing Ltd; Valencia; Presencial; EUR 40.000 - 60.000; Jornada completa

Descripción de la vacante

QCS Staffing Ltd seeks a Security Operations Analyst for Defence Operations in Valencia, Spain, starting with an initial 6-month contract and potential extensions. The role will be onsite in Valencia, focusing on security alert handling across Microsoft tools, AWS, SIEM, and EDR platforms.

The ideal candidate has extensive cybersecurity and SOC experience, with hands-on SIEM/EDR skills and cloud security knowledge across Azure, AWS, and Google Cloud.

Formación

• Extensive experience in cybersecurity, SOC operations, security monitoring, alert triage, and incident investigation.
• Hands-on experience with SIEM/EDR technologies such as Microsoft Sentinel, Splunk, QRadar, CrowdStrike or Defender for Endpoint.
• Knowledge of cloud security across Azure, AWS and/or Google Cloud platforms.

Responsabilidades

• Monitor, triage, investigate, and respond to security alerts across Microsoft Security tools, AWS environments, SIEM platforms, and EDR solutions.
• Analyze network, endpoint, and system logs to identify threats and determine remediation actions.
• Support incident response activities including containment, recovery, root cause analysis, and escalation management.

Conocimientos

Cybersecurity

SOC operations

Security monitoring

Alert triage

Incident investigation

Herramientas

Microsoft Sentinel

Splunk

QRadar

CrowdStrike

Defender for Endpoint

Descripción del empleo

Security Operations Analyst - Defence Operations - Valencia, Spain - Initial 6-Month Contract

Our client, an international IT service provider, is seeking a Security Operations Analyst - Defence Operations to join them as a contractor, with the option to work onsite within the charming region of Valencia. Starting at an initial 6 month contract, multiple extensions are expected and there is great, long-term potential.

What you’ll deliver

• Monitor, triage, investigate, and respond to security alerts across Microsoft Security tools, AWS environments, SIEM platforms, and EDR solutions.
• Analyze network, endpoint, and system logs (firewalls, IDS/IPS, syslog, servers) to identify threats and determine appropriate remediation actions.
• Support incident response activities, including threat investigation, root cause analysis, containment, recovery, and escalation management.

Key requirements

• Extensive experience in cybersecurity, SOC operations, security monitoring, alert triage, and incident investigation.
• Strong hands-on experience with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, QRadar, CrowdStrike, or Microsoft Defender for Endpoint.
• Advanced knowledge of Microsoft Security technologies, including Microsoft 365 Security, Defender Suite, Azure Security, Sentinel, and XDR solutions.
• Proven expertise in cloud security across Azure, AWS, and/or Google Cloud Platform environments.