Senior SIEM Analyst - Threat Detection & Forensics

FoshTech; Madrid; Presencial; EUR 60.000 - 95.000; Jornada completa

Descripción de la vacante

FoshTech in Madrid seeks a seasoned SIEM/Log Analytics professional to collect, normalize, analyze, and exploit security logs across the organization, ingest into SIEMs, and detect threats. You will design pipelines, dashboards, and alerts, and play a key role in incident response and forensic investigations.

You will collaborate with the SOC, IT, and security teams to maintain data quality, extend detection capabilities, and document processes for audit and continuous improvement.

Formación

• Studies in computer science, telecommunications, cybersecurity, or related field.
• At least 3 years of work experience in SIEM operations, log analysis, or security monitoring roles.
• Hands-on experience collecting and managing logs from multiple sources (endpoints, network devices, servers, cloud services, applications, authentication systems, etc.).
• At least 2 years of experience with Splunk.
• At least 2 years of experience working with CrowdStrike.
• Experience with other SIEM/log platforms (FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius).
• Experience creating dashboards, visualizations, and reports based on log data.
• Experience defining and tuning alerts and correlation rules.
• Knowledge of scripting or query languages used in SIEM platforms (SPL, KQL, SQL-like).
• Familiarity with MITRE ATT&CK and threat detection frameworks.
• Strong documentation and reporting skills.

Responsabilidades

• Design, implement, and maintain log collection pipelines from multiple sources (security, infrastructure, cloud, apps).
• Ensure logs are ingested, parsed, normalized, and retained across SIEMs such as FortiAnalyzer, Splunk, CrowdStrike.
• Maintain data quality and consistency across all log sources.
• Design and maintain dashboards and visualizations for security posture and operational metrics.
• Create and tune correlation rules and alerts based on attack patterns, IOCs, and behavioral anomalies.
• Proactively hunt for threats through advanced log searches and pattern analysis.
• Support incident response and forensic investigations by analyzing historical logs and reconstructing timelines.
• Collaborate with SOC Analysts and other security roles during investigations and response.
• Document procedures and updates for log management, detection, and investigation.

Conocimientos

SIEM operations

Log analysis

Security monitoring

Splunk

CrowdStrike

Log collection

Regex

Scripting

Threat hunting

Incident response

Educación

Studies in computer science, telecommunications, cybersecurity, or related field

Herramientas

Splunk

FortiAnalyzer

CrowdStrike

New Relic

ManageEngine AD Audit

Axonius

Descripción del empleo

FoshTech in Madrid seeks a seasoned SIEM/Log Analytics professional to collect, normalize, analyze, and exploit security logs across the organization, ingest into SIEMs, and detect threats. You will design pipelines, dashboards, and alerts, and play a key role in incident response and forensic investigations.

You will collaborate with the SOC, IT, and security teams to maintain data quality, extend detection capabilities, and document processes for audit and continuous improvement.