SOC SIEM EMEA

Mouri Tech LLC; Valencia; Vor Ort; EUR 60.000 - 90.000; Vollzeit

Zusammenfassung

Mouri Tech LLC is seeking a SOC SIEM EMEA specialist for a contract role in Valencia, Spain. The candidate will perform front line security operations, triage alerts, and administer SIEM platforms with a focus on Splunk or MS Sentinel, while integrating cloud sources across Azure, AWS, and GCP.

The role requires 5+ years IT experience, strong knowledge of Microsoft security tools, EDR, and scripting, with duties spanning data onboarding, detection content, and collaboration with Incident

Qualifikationen

• Five+ years in information technology with alert triage and security incident support.
• Experience administering a SIEM platform (Splunk or MS Sentinel).
• Autonomy in technical threat analysis with SOC tools and IR collaboration.
• Deep knowledge of Microsoft Security Tools and cloud platforms (Azure/AWS/GCP).
• Familiarity with EDR solutions and scripting languages.

Aufgaben

• Provide front line support to partners in information/cyber security and risk management.
• Perform security operations activities in collaboration with a team of experts.
• Design, build, and operate SIEM ingestion pipelines across cloud and on‑prem.
• Onboard data sources and contribute to detection content and use‑case lifecycle.

Kenntnisse

SIEM administration

Alert triage

Cloud security

Microsoft security tools

Scripting

EDR experience

Linux/Mac/Windows

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK Stack

Jobbeschreibung

We are recruiting for a position SOC SIEM EMEA to our client located in Valencia, Spain as a contract role.

5+ yrs IT incl. alert triage; hands‑on SIEM administration (Splunk or Microsoft Sentinel); detection content and use‑case lifecycle; data‑source onboarding; Microsoft security stack; Azure/AWS/GCP; EDR

SIEM architecture from design to build, ingestion pipelines across cloud and on‑prem; AWS monitoring; scripting. Certs: SC-200, GCIH, CEH, GCFA or similar.

Required Profile:

The incumbent will be part of the Cybersecurity Operations Section (CSO) to provide front line support to Partners in the area of information/cyber security, risk management consulting, and security operations activities in collaboration with a team of information and cyber security experts.

Required Technical Skills:

• A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidents
• Proven experience on administering a SIEM platform, preferably either Splunk or Microsoft Sentinel SIEM
• Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response team
• Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR
• Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP)
• Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack
• Knowledge of at least one EDR solution (MS Defender for Endpoint, CrowdStrike)
• Knowledge of email security, network monitoring, and incident response
• Knowledge of Linux/Mac/Windows
• Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.)

Desirable certifications:

• Technical certifications: MCSE, CCNA, Microsoft Azure (e.g., SC-200), GCIH, CEH, GCFA or any GIAC/similar certification