SIEM & Threat Detection Engineer (Security Ops)

Pragmatike; Italia; Ibrido; EUR 70.000 - 110.000; Tempo pieno

Descrizione del lavoro

Pragmatike is seeking a Security Operations Analyst specializing in SIEM and Threat Detection to join a global cybersecurity operations team. You will build, operate, and optimize security monitoring across international environments, focusing on SIEM administration, detection engineering, data-source onboarding, and use-case lifecycle management.

You’ll collaborate with Threat Intelligence, Incident Response, and Cybersecurity Operations to translate threats into measurable detection

Competenze

• 5+ years of IT/cybersecurity experience.
• Hands-on experience administering a SIEM platform, ideally Splunk or Microsoft Sentinel.
• Strong experience with SIEM/EDR environments and technical security analysis.
• Deep knowledge of Microsoft security technologies.
• Strong cloud security knowledge across Azure, AWS, and/or GCP.

Mansioni

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Support cybersecurity architecture reviews and provide recommendations to improve security monitoring.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Evaluate detection effectiveness and identify opportunities to reduce false positives.
• Contribute to quality assurance, process reviews, control validation, and corrective actions.
• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.
• Prepare technical reports, findings, and recommendations for internal and external stakeholders.

Conoscenze

SIEM administration

Threat detection

Security monitoring

Cloud security

EDR experience

Strumenti

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Descrizione del lavoro

Pragmatike is seeking a Security Operations Analyst specializing in SIEM and Threat Detection to join a global cybersecurity operations team. You will build, operate, and optimize security monitoring across international environments, focusing on SIEM administration, detection engineering, data-source onboarding, and use-case lifecycle management.

You’ll collaborate with Threat Intelligence, Incident Response, and Cybersecurity Operations to translate threats into measurable detection