Senior SIEM Analyst & Threat Hunter

Fosh; Comunidad de Madrid; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

FoshTech seeks a security data analyst to collect, normalize, and analyze logs from multiple sources. You will ensure ingestion into SIEM platforms, develop dashboards, and tune alerts to detect threats and incidents. You will support forensic investigations, incident response, and documentation.

The role collaborates with SOC Analysts, IAM, Threat Hunting, and other security teams, driving continuous improvement in detection capabilities. Strong scripting and regex skills are valued.

Formación

• Studies in computer science, telecommunications, cybersecurity, or related fields.
• 3+ years in SIEM operations, log analysis, or security monitoring roles.
• Hands-on experience collecting and managing logs from multiple sources.

Responsabilidades

• Design, implement, and maintain log collection pipelines from security, infrastructure, cloud, and applications.
• Ensure logs are ingested, parsed, normalized, and retained across SIEM platforms (FortiAnalyzer, Splunk, CrowdStrike, others).
• Maintain data quality and consistency across all log sources.

Conocimientos

SIEM operations

Log analysis

Threat hunting

Dashboards

Alerts tuning

Incident response

Forensic analysis

Data normalization

Scripting (SPL/KQL/SQL)

Regex

MITRE ATT&CK

Threat detection

Documentation

Collaboration

Educación

Bachelor in Computer Science / Information Security

Cybersecurity studies

Herramientas

Splunk

CrowdStrike

FortiAnalyzer

New Relic

ManageEngine AD Audit

Axonius

Descripción del empleo

FoshTech seeks a security data analyst to collect, normalize, and analyze logs from multiple sources. You will ensure ingestion into SIEM platforms, develop dashboards, and tune alerts to detect threats and incidents. You will support forensic investigations, incident response, and documentation.

The role collaborates with SOC Analysts, IAM, Threat Hunting, and other security teams, driving continuous improvement in detection capabilities. Strong scripting and regex skills are valued.