SIEM Analyst: Threat Detection & Incident Response

Novcom; Madrid; Presencial; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

Novcom is seeking a security analytics professional to collect, normalize, analyze, and exploit security logs from multiple sources. You will ensure ingestion into SIEM platforms and use the data to detect threats, incidents, and anomalies through dashboards, alerts, and advanced log analysis.

Key responsibilities include building pipelines, maintaining data quality, and developing detection use cases with the Information Security Team.

Formación

• Studies in computer science, telecommunications, cybersecurity, or related fields.
• At least 3 years in SIEM operations, log analysis, or security monitoring.
• Hands-on experience collecting and managing logs from multiple sources.
• At least 2 years with Splunk; 2 years with CrowdStrike.
• Experience with FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius, or similar.
• Experience creating dashboards, visualizations, and reports from log data.
• Experience defining and tuning alerts and correlation rules.
• Knowledge of scripting or query languages used in SIEM platforms.
• Familiarity with MITRE ATT&CK and threat detection frameworks.
• Strong documentation and reporting skills.

Responsabilidades

• Design, implement, and maintain log collection pipelines from multiple sources.
• Ensure logs are ingested, parsed, normalized, and retained across SIEMs such as FortiAnalyzer, Splunk, CrowdStrike.
• Maintain data quality and consistency across log sources.
• Design and maintain dashboards and visualizations for security posture and metrics.
• Create and tune correlation rules and alerts based on attacks, IOCs, and anomalies.
• Collaborate with SOC Analysts and other security roles during incident response.
• Validate detections to reduce false positives and improve quality.
• Document procedures for log management, detection, and investigation.
• Support incident response and forensic investigations by searching historical logs and reconstructing timelines.
• Produce reports based on SIEM data for technical and management audiences.

Conocimientos

SIEM OPS

Log analysis

Threat detection

Data correlation

Regex

Scripting

Incident response

Forensic analysis

Documentation

Independent work

Educación

Bachelor's in CS/Cybersecurity

Herramientas

Splunk

CrowdStrike

FortiAnalyzer

New Relic

ManageEngine AD Audit

Axonius

Jira

Descripción del empleo

Novcom is seeking a security analytics professional to collect, normalize, analyze, and exploit security logs from multiple sources. You will ensure ingestion into SIEM platforms and use the data to detect threats, incidents, and anomalies through dashboards, alerts, and advanced log analysis.

Key responsibilities include building pipelines, maintaining data quality, and developing detection use cases with the Information Security Team.