Security Operations Analyst – SIEM & Threat Detection

QCS Staffing Ltd; Valencia; On-site; EUR 42,000 - 64,000; Full time

Job summary

QCS Staffing Ltd in Valencia, Spain is seeking a Security Operations Analyst (SIEM & Threat Detection) on a 6-month contract to join as a contractor onsite in the Valencia region. You will develop, implement, tune, and maintain security monitoring capabilities across SIEM, EDR, cloud, and cybersecurity platforms.

Ideal candidates have extensive experience in SOC operations and hands-on SIEM administration (Microsoft Sentinel or Splunk), plus strong knowledge of Microsoft security technologies

Qualifications

• Extensive experience in cybersecurity operations and SOC environments.
• Hands-on administration with a SIEM platform (Microsoft Sentinel or Splunk).
• Strong knowledge of Microsoft security technologies (Microsoft 365, Defender, XDR, Azure Security, Sentinel).
• Experience with Azure, AWS, and GCP for security monitoring and log analysis.

Responsibilities

• Develop, implement, tune, validate, and maintain security monitoring and threat detection capabilities across SIEM, EDR, cloud, and cybersecurity platforms.
• Support the day-to-day operation, optimisation, and continuous improvement of SOC monitoring and threat detection services.
• Onboard, integrate, test, and validate new security data sources, telemetry feeds, and monitoring capabilities.
• Manage detection content lifecycle activities, including use case development, rule tuning, testing, reviews, and quality assurance.

Skills

Cybersecurity operations

SOC environments

Alert triage

Security incident support

Tools

Microsoft Sentinel

Splunk

Job description

Security Operations Analyst – SIEM & Threat Detection – Valencia, Spain – Initial 6-Month Contract

Our client, an international IT service provider, is seeking a Security Operations Analyst (SIEM & Threat Detection) to join them as a contractor, with the option to work onsite within the charming region of Valencia. Starting at an initial 6 month contract, multiple extensions are expected and there is great, long-term potential.

What you’ll deliver:

• Develop, implement, tune, validate, and maintain security monitoring and threat detection capabilities across SIEM, EDR, cloud, and cybersecurity platforms.
• Support the day-to-day operation, optimisation, and continuous improvement of SOC monitoring and threat detection services.
• Onboard, integrate, test, and validate new security data sources, telemetry feeds, and monitoring capabilities.
• Manage detection content lifecycle activities, including use case development, rule tuning, testing, reviews, and quality assurance.

Key requirements:

• Extensive experience in cybersecurity operations, SOC environments, alert triage, and security incident support.
• Hands-on administration experience with a SIEM platform, preferably Microsoft Sentinel or Splunk.
• Strong knowledge of Microsoft security technologies, including Microsoft 365, Defender, XDR, Azure Security, and Sentinel.
• Experience working with cloud platforms such as Azure, AWS, and GCP, including security monitoring and log analysis.