Senior SIEM Ops & Threat Detection Specialist

SmartRecruiters, Inc.; Vigo; Presencial; EUR 70.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote Position

Full-time contract

Training and career development

International projects

Multicultural team

Descripción de la vacante

Talan Spain is seeking a Security Operations Analyst to join its global CSOC team. The role focuses on SIEM operations, threat detection engineering, and security data integration across multiple environments in a remote setup.

You will contribute to content management, validation, and tuning of detections, while coordinating with incident response and threat intelligence teams to maintain high security monitoring standards.

Formación

• +5 years of experience in information technology, including triage of alerts and supporting security incidents.
• Proven experience administering a SIEM platform, preferably Splunk or Microsoft Sentinel.
• Experience with SOC toolbox (SIEMs, EDRs) and threat analysis with Incident Response.
• Deep knowledge of Microsoft Security Tools (M365, Cloud App Security, Azure, Defender for Endpoints, Azure Sentinel, and XDR).
• Cloud knowledge: Azure, AWS, GCP.
• Knowledge of SIEM tools: Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack.
• Knowledge of at least one EDR (Defender for Endpoint, CrowdStrike).
• Knowledge of email security, network monitoring, and incident response.
• Knowledge of Linux/Mac/Windows.

Responsabilidades

• Develop, validate, tune, and maintain security monitoring across SIEM, EDR, cloud, and other cybersecurity platforms.
• Operate and improve security monitoring and threat detection services.
• Onboard, integrate, test, and validate new security data sources and telemetry.
• Manage security content, use-case lifecycle, rule reviews, testing and QA.
• Collaborate with threat intelligence, IR, and SOC teams to translate requirements into detection capabilities.
• Participate in security architecture reviews and recommend improvements.
• Prepare cybersecurity operations metrics, dashboards, KPIs, and reports.
• Review detections and configurations, identify optimization opportunities.
• Gather feedback to tune detections, reduce false positives, improve quality.
• Support CSOC procedures, documentation, knowledge base, and guidance.
• Prepare and present technical findings to stakeholders.

Conocimientos

SIEM administration

Threat detection engineering

Security incidents triage

EDR tools

Microsoft security tools

Cloud platforms

SIEM tools

Linux/macOS/Windows

Documentation & reporting

Herramientas

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK Stack

Defender for Endpoint

CrowdStrike

Azure Security Center

Descripción del empleo

Talan Spain is seeking a Security Operations Analyst to join its global CSOC team. The role focuses on SIEM operations, threat detection engineering, and security data integration across multiple environments in a remote setup.

You will contribute to content management, validation, and tuning of detections, while coordinating with incident response and threat intelligence teams to maintain high security monitoring standards.