SIEM Analyst – Threat Detection & Incident Response

Fosh; Madrid; Presencial; EUR 40.000 - 65.000; Jornada completa

Descripción de la vacante

FoshTech is seeking an experienced SIEM/Log Analysis specialist to collect, normalize, and analyze security logs from diverse sources. You will develop dashboards, alerts, and use SIEM platforms to detect threats, investigate incidents, and conduct forensic analysis.

Collaboration with the Information Security Team and ongoing detection improvement are essential. Ideal candidates have 3+ years in SIEM/log operations, strong Splunk and CrowdStrike experience, and a solid foundation in networking

Formación

• Studies in computer science, telecommunications, cybersecurity, or related fields.
• Minimum 3 years in SIEM operations, log analysis, or security monitoring.
• Experience collecting logs from endpoints, networks, servers, and cloud services.
• 2+ years with Splunk and CrowdStrike required.
• Experience with FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius, or similar.
• Dashboard creation, visualization, and reporting from log data.
• Experience in defining and tuning alerts and correlation rules.

Responsabilidades

• Design, implement, and maintain log collection pipelines from multiple sources.
• Ensure logs are ingested, parsed, normalized, and retained across SIEM platforms.
• Maintain data quality and consistency across log sources.
• Design and maintain dashboards and visualizations for security posture and metrics.
• Create, tune, and maintain correlation rules and alerts (IOCs, attack patterns, anomalies).
• Support incident response and forensic investigations through log analysis.
• Collaborate with SOC Analysts, Dev Security, IAM and Threat Hunting teams.
• Document procedures and ensure timely, traceable reporting via tickets (Jira).
• Share knowledge to improve detection capabilities and maintain training.

Conocimientos

SIEM operations

Log analysis

Threat hunting

Dashboard creation

Alert tuning

SPL/KQL/SQL-like queries

Regex

YARA rules

Documentation

Incident response support

Educación

CS/telecommunications/cybersecurity studies

Herramientas

Splunk

CrowdStrike

FortiAnalyzer

New Relic

ManageEngine AD Audit

Axonius

Descripción del empleo

FoshTech is seeking an experienced SIEM/Log Analysis specialist to collect, normalize, and analyze security logs from diverse sources. You will develop dashboards, alerts, and use SIEM platforms to detect threats, investigate incidents, and conduct forensic analysis.

Collaboration with the Information Security Team and ongoing detection improvement are essential. Ideal candidates have 3+ years in SIEM/log operations, strong Splunk and CrowdStrike experience, and a solid foundation in networking