Senior SIEM & Threat Detection Engineer (Hybrid/Remote)

Pragmatike; Brindisi; Ibrido; EUR 55.000 - 85.000; Tempo pieno

Descrizione del lavoro

Pragmatike is recruiting for a Security Operations Analyst focusing on SIEM administration, detection engineering, and security content across SIEM platforms. You’ll onboard data sources, manage use cases, and optimize detection in collaboration with Threat Intelligence and Incident Response teams.

The role emphasizes building scalable security monitoring, supporting international organisations across EMEA, and delivering measurable detection improvements within a 6-month contract with potential

Competenze

• 5+ years of IT/cybersecurity experience.
• Hands-on SIEM administration with one or more platforms.
• Strong cloud security knowledge across Azure, AWS, and/or GCP.
• Experience with SIEM/EDR environments and security analytics.

Mansioni

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.

Conoscenze

SIEM administration

Threat detection engineering

Cloud security (Azure/AWS/GCP)

Security analytics

Linux/macOS/Windows

English fluency

Strumenti

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Defender for Endpoint

CrowdStrike

Descrizione del lavoro

Pragmatike is recruiting for a Security Operations Analyst focusing on SIEM administration, detection engineering, and security content across SIEM platforms. You’ll onboard data sources, manage use cases, and optimize detection in collaboration with Threat Intelligence and Incident Response teams.

The role emphasizes building scalable security monitoring, supporting international organisations across EMEA, and delivering measurable detection improvements within a 6-month contract with potential