SIEM Detection Engineer - Threat Detection (Hybrid/Remote)

Pragmatike; Puglia; Ibrido; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Pragmatike is seeking a Security Operations Analyst to join a global cybersecurity operations team. The role focuses on SIEM administration, detection engineering, security content, and data-source onboarding to deliver effective, measurable detection capabilities across international environments.

You will collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detections, maintain dashboards, and optimize monitoring. Fluent English is required.

Competenze

• 5+ years in IT/cybersecurity.
• Hands-on SIEM administration (Splunk or MS Sentinel).
• Strong cloud security knowledge (Azure, AWS, and/or GCP).
• Experience with EDR and incident response.
• Proficient in Linux, macOS, and Windows.
• Fluent English communication skills.

Mansioni

• Develop, tune, and maintain security monitoring and detection capabilities.
• Administer SIEM platforms across multiple customer environments.
• Manage detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Support cybersecurity architecture reviews and provide recommendations to improve monitoring.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Evaluate detection effectiveness and identify opportunities to reduce false positives.
• Contribute to quality assurance, process reviews, control validation, and corrective actions.
• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.
• Prepare technical reports, findings, and recommendations for internal and external stakeholders.

Conoscenze

SIEM administration

Threat detection

Cloud security

EDR experience

Linux/macOS/Windows

Communication skills

Strumenti

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Microsoft Defender for Endpoint

CrowdStrike

Descrizione del lavoro

Pragmatike is seeking a Security Operations Analyst to join a global cybersecurity operations team. The role focuses on SIEM administration, detection engineering, security content, and data-source onboarding to deliver effective, measurable detection capabilities across international environments.

You will collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detections, maintain dashboards, and optimize monitoring. Fluent English is required.