Security Operations Analyst - Defence Operations

QCS Staffing Ltd; Valencia; On-site; EUR 50,000 - 70,000; Full time

Job summary

QCS Staffing Ltd in Valencia, Spain is seeking a Security Operations Analyst - Defence Operations for an initial 6-month contract. The role focuses on monitoring, triage, and incident response within Microsoft Security tools, AWS, SIEM, and EDR environments.

You will analyze logs from firewalls and systems, support containment and escalation, and work onsite in the Valencia region with long-term extension potential.

Qualifications

• Extensive experience in cybersecurity, SOC operations and incident investigation.
• Hands-on with SIEM/EDR technologies (Microsoft Sentinel, Splunk, QRadar, CrowdStrike, Defender for Endpoint).
• Strong knowledge of Microsoft 365 Security, Defender Suite, Azure Security, Sentinel, and XDR.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts across Microsoft Security tools, AWS, SIEM platforms, and EDR solutions.
• Analyze network, endpoint, and system logs to identify threats and determine remediation actions.
• Support incident response activities including containment, recovery, and escalation management.

Skills

SOC operations

Security monitoring

Incident investigation

Microsoft Sentinel

Splunk

QRadar

CrowdStrike

Defender for Endpoint

Azure Security

AWS security

GCP security

Tools

Microsoft 365 Security

Defender for Endpoint

Azure Security Center

Microsoft Sentinel

Splunk

QRadar

CrowdStrike

Job description

Security Operations Analyst - Defence Operations – Valencia, Spain – Initial 6-Month Contract

Our client, an international IT service provider, is seeking an Security Operations Analyst - Defence Operations to join them as a contractor, with the option to work onsite within the charming region of Valencia. Starting at an initial 6 month contract, multiple extensions are expected and there is great, long-term potential.

What You’ll Deliver

• Monitor, triage, investigate, and respond to security alerts across Microsoft Security tools, AWS environments, SIEM platforms, and EDR solutions.
• Analyze network, endpoint, and system logs (firewalls, IDS/IPS, syslog, servers) to identify threats and determine appropriate remediation actions.
• Support incident response activities, including threat investigation, root cause analysis, containment, recovery, and escalation management.

Key requirements

• Extensive experience in cybersecurity, SOC operations, security monitoring, alert triage, and incident investigation.
• Strong hands‑on experience with SIEM and EDR technologies such as Microsoft Sentinel, Splunk, QRadar, CrowdStrike, or Microsoft Defender for Endpoint.
• Advanced knowledge of Microsoft Security technologies, including Microsoft 365 Security, Defender Suite, Azure Security, Sentinel, and XDR solutions.
• Proven expertise in cloud security across Azure, AWS, and/or Google Cloud Platform environments.