SIEM & Threat Detection Engineer (Hybrid/Remote)

Pragmatike; Elche; Híbrido; EUR 70.000 - 100.000; Jornada completa

Descripción de la vacante

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments.

This role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and

Formación

• 5+ years of IT/cybersecurity experience.
• Hands-on SIEM administration experience (Splunk or Microsoft Sentinel).
• Experience with SIEM/EDR environments and security analysis.
• Strong knowledge of Microsoft Security technologies.
• Cloud security knowledge across Azure, AWS, and/or GCP.
• Experience with multiple SIEM platforms (Splunk, QRadar, ArcSight, MS Sentinel, ELK).
• Experience with at least one EDR like Defender for Endpoint or CrowdStrike.
• Knowledge of email security, network monitoring, and incident response.
• Strong Linux, macOS, and Windows knowledge.
• Fluent English with excellent written and verbal communication.

Responsabilidades

• Develop, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple customer environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Support cybersecurity architecture reviews and provide recommendations to improve security monitoring.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Evaluate detection effectiveness and identify opportunities to reduce false positives.
• Contribute to quality assurance, process reviews, control validation, and corrective actions.
• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.
• Prepare technical reports, findings, and recommendations for internal and external stakeholders.

Conocimientos

SIEM administration

Threat detection

Security analytics

Cloud security

Linux

Windows

MacOS

Herramientas

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK Stack

Defender for Endpoint

Descripción del empleo

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments.

This role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and