SIEM Detection Engineer - Security Ops (Hybrid/Remote)

Pragmatike; Valencia; Híbrido; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

Pragmatike is recruiting a Security Operations Analyst specializing in SIEM and Threat Detection. You will join a global Cybersecurity Operations team focused on building, operating, and improving security monitoring across international environments.

The role emphasizes SIEM administration, detection content, data-source onboarding, and use‑case lifecycle management. This 6‑month contract offers hybrid/remote work across EMEA with a focus on SIEM platforms such as Splunk or Microsoft Sentinel,

Formación

• 5+ years of IT/cybersecurity experience.
• Hands-on SIEM administration across platforms (Splunk, Sentinel).
• Strong security analysis and monitoring capabilities.
• Cloud security exposure across Azure/AWS/GCP.
• Experience with data sources onboarding and use‑case lifecycle.

Responsabilidades

• Develop, implement, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple environments.
• Manage detection rules and use cases throughout their lifecycle.
• Onboard and validate new security data sources and telemetry feeds.
• Review detection logic and monitoring configurations for improvements.
• Collaborate with Threat Intelligence and IR teams to translate threats into detections.
• Support architecture reviews and improve monitoring practices.
• Build security metrics, dashboards, and service-performance reports.
• Evaluate detection effectiveness and reduce false positives.
• Contribute to QA, process reviews, and knowledge bases.

Conocimientos

SIEM administration

Threat detection analysis

Cloud security

Security monitoring

Linux/macOS/Windows

English fluency

Educación

Bachelor’s degree in Cybersecurity or IT

Herramientas

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Defender for Endpoint

CrowdStrike

Descripción del empleo

Pragmatike is recruiting a Security Operations Analyst specializing in SIEM and Threat Detection. You will join a global Cybersecurity Operations team focused on building, operating, and improving security monitoring across international environments.

The role emphasizes SIEM administration, detection content, data-source onboarding, and use‑case lifecycle management. This 6‑month contract offers hybrid/remote work across EMEA with a focus on SIEM platforms such as Splunk or Microsoft Sentinel,