Senior SIEM & Threat Detection Specialist (Hybrid/Remote)

Pragmatike; Madrid; Híbrido; EUR 42.000 - 64.000; Jornada completa

Descripción de la vacante

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving security monitoring capabilities protecting international organizations and their technology environments.

You’ll work on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management,

Formación

• 5+ years of IT/cybersecurity experience.
• Hands-on SIEM administration (Splunk or MS Sentinel).
• Strong cloud security knowledge across Azure, AWS, GCP.
• Experience with SIEM/EDR platforms such as Splunk, QRadar, ArcSight, MS Sentinel, or ELK.
• Experience with an EDR such as Defender for Endpoint or CrowdStrike.
• Strong Linux, macOS, and Windows knowledge.
• Fluent English, written and verbal.

Responsabilidades

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple customer environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Prepare technical reports and recommendations for stakeholders.

Conocimientos

SIEM administration

Threat detection

Cloud security

Linux knowledge

Windows knowledge

Herramientas

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Descripción del empleo

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving security monitoring capabilities protecting international organizations and their technology environments.

You’ll work on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management,