Senior SIEM & Threat Detection Analyst (Hybrid/Remote)

Pragmatike; Polska; Hybrid; PLN 306,000 - 437,000; Full time

Job summary

Pragmatike is recruiting a Security Operations Analyst specializing in SIEM and Threat Detection for an international organization. You’ll join a global Cybersecurity Operations team focused on building, operating, and improving security monitoring capabilities across international environments.

The role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and detection optimization, working with Threat Intelligence, Incident Response, and

Qualifications

• 5+ years of IT/cybersecurity experience.
• Hands-on SIEM administration experience (Splunk or Microsoft Sentinel preferred).
• Strong SIEM/EDR experience and security analysis.
• Deep knowledge of Microsoft Security technologies.
• Cloud security knowledge across Azure, AWS, and/or GCP.
• Experience with multiple SIEM/EDR platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK.
• Experience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike.
• Knowledge of email security, network monitoring, and incident response.
• Strong Linux, macOS, and Windows knowledge.
• Fluent English with excellent written and verbal communication skills.

Responsibilities

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple customer environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Evaluate detection effectiveness and identify opportunities to reduce false positives.

Skills

SIEM administration

Threat detection

Security content

Data-source onboarding

Use-case lifecycle

Detection optimization

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

Defender for Endpoint

CrowdStrike

Azure

AWS

GCP

Job description

Pragmatike is recruiting a Security Operations Analyst specializing in SIEM and Threat Detection for an international organization. You’ll join a global Cybersecurity Operations team focused on building, operating, and improving security monitoring capabilities across international environments.

The role emphasizes SIEM administration, detection engineering, data-source onboarding, use-case lifecycle management, and detection optimization, working with Threat Intelligence, Incident Response, and