Senior SIEM & Threat Detection Engineer (Hybrid/Remote)

Pragmatike; Elche; Hybrid; EUR 50,000 - 75,000; Full time

Job summary

Pragmatike is recruiting for a Security Operations Analyst specializing in SIEM and Threat Detection. You will join a global cybersecurity operations team focused on building, operating, and improving security monitoring capabilities across international environments.

The role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and detection optimization, working with Threat Intelligence and Incident Response teams to turn threats into

Qualifications

• 5+ years of relevant IT/cybersecurity experience.
• Hands-on experience administering a SIEM platform (Splunk or Microsoft Sentinel preferred).
• Strong knowledge of SIEM/EDR environments and security analysis.
• Deep knowledge of Microsoft Security technologies.
• Strong cloud security knowledge across Azure, AWS, and/or GCP.

Responsibilities

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple customer environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Support cybersecurity architecture reviews and provide improvement recommendations.
• Build and maintain security metrics, dashboards, KPIs, and service‑performance reports.
• Evaluate detection effectiveness and reduce false positives.

Skills

SIEM administration

Detection engineering

Security content

Data-source onboarding

Use-case lifecycle

Detection optimization

Threat Intelligence

Incident Response

Cloud security

Linux

Windows

macOS

English communication

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Defender for Endpoint

CrowdStrike

Job description

Pragmatike is recruiting for a Security Operations Analyst specializing in SIEM and Threat Detection. You will join a global cybersecurity operations team focused on building, operating, and improving security monitoring capabilities across international environments.

The role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and detection optimization, working with Threat Intelligence and Incident Response teams to turn threats into