Senior Security Operations Analyst — Remote (LATAM)

Pragmatike; México; Remote; MXN 600,000 - 900,000; Full time

Job summary

Pragmatike is seeking a Security Operations Analyst to join a 24/7 SOC. You will monitor, triage, investigate, and respond to security threats across enterprise, cloud, network, and endpoints.

You’ll leverage SIEM/EDR, Microsoft security tools, and multi-cloud platforms while collaborating with regional teams to enhance detection, investigations, and reporting. Fluency in English is required for global coordination.

Qualifications

• 5+ years of IT/cybersecurity experience including security alert triage and incident support.
• Hands-on experience in a SOC environment.
• Strong experience with SIEM and EDR platforms.
• Advanced log analysis across Windows/Linux/databases/app infra.
• Knowledge of Microsoft security tools including Defender and Sentinel.
• Cloud security experience in Azure/AWS/GCP.
• Experience with SIEM such as Splunk, QRadar, ArcSight, Sentinel, or ELK.
• Experience with an EDR solution such as Defender for Endpoint or CrowdStrike.
• Knowledge of email security, network monitoring, and IR basics.
• Strong knowledge of Linux, macOS, and Windows.
• Fluent English with strong written and verbal skills.

Responsibilities

• Monitor, triage, and investigate security alerts across SIEM/EDR, Microsoft security tools, and cloud platforms.
• Analyze host and network logs from Windows, Linux, databases, apps, web servers, firewalls, and NIDS/HIDS.
• Investigate suspicious activity, identify root causes, and determine remediation or escalation.
• Support incident response, remediation, and recovery activities.
• Collaborate with IR and other teams to manage threats.
• Analyze events using TCP/IP, syslog, firewall, and network monitoring data.
• Tune detection rules to reduce false positives and improve coverage.
• Gather information from clients to improve monitoring.
• Prepare reports, summaries, and technical findings.
• Contribute to SOC processes, docs, and QA.

Skills

SOC operations

SIEM & EDR

Log analysis

Microsoft security tech

Cloud security (Azure/AWS/GCP)

Threat detection & incident response

Windows/Linux/macOS

English communication

Security reporting

Tools

Splunk

QRadar

ArcSight

Microsoft Sentinel

ELK

Defender for Endpoint

Job description

Pragmatike is seeking a Security Operations Analyst to join a 24/7 SOC. You will monitor, triage, investigate, and respond to security threats across enterprise, cloud, network, and endpoints.

You’ll leverage SIEM/EDR, Microsoft security tools, and multi-cloud platforms while collaborating with regional teams to enhance detection, investigations, and reporting. Fluency in English is required for global coordination.