SIEM Threat Detection Engineer – Hybrid/Remote (EMEA)

Pragmatike; United States; Hybrid; USD 80,000 - 125,000; Full time

Job summary

Pragmatike is seeking a Security Operations Analyst focused on SIEM administration and detection engineering within a global cybersecurity operations team. You’ll build, tune, and validate monitoring capabilities across multi-tenant environments and collaborate with Threat Intelligence and Incident Response teams.

Ideal candidates have 5+ years in IT security, hands-on SIEM experience (Splunk or Microsoft Sentinel), cloud security knowledge (Azure/AWS/GCP), and strong English communication.

Qualifications

• 5+ years of relevant IT/cybersecurity experience.
• Hands-on experience administering a SIEM platform (Splunk or Microsoft Sentinel).
• Strong experience with SIEM/EDR environments and technical security analysis.
• Deep knowledge of Microsoft Security technologies.
• Strong cloud security knowledge across Azure, AWS, and/or GCP.

Responsibilities

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.
• Administer and optimize SIEM platforms across multiple customer environments.
• Manage security detection rules and use cases throughout their lifecycle.
• Onboard, integrate, test, and validate new security data sources and telemetry feeds.
• Review and improve detection logic, security content, and monitoring configurations.
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.
• Support cybersecurity architecture reviews and provide recommendations to improve security monitoring.
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.
• Evaluate detection effectiveness and identify opportunities to reduce false positives.
• Contribute to quality assurance, process reviews, control validation, and corrective actions.
• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.
• Prepare technical reports, findings, and recommendations for internal and external stakeholders.

Skills

SIEM administration

Threat detection

Security content

Data-source onboarding

Use-case lifecycle

Detection optimization

English communication

Linux/macOS/Windows

Cloud security

Azure/AWS/GCP

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

ELK

EDR platforms (Defender for Endpoint, CrowdStrike)

Job description

Pragmatike is seeking a Security Operations Analyst focused on SIEM administration and detection engineering within a global cybersecurity operations team. You’ll build, tune, and validate monitoring capabilities across multi-tenant environments and collaborate with Threat Intelligence and Incident Response teams.

Ideal candidates have 5+ years in IT security, hands-on SIEM experience (Splunk or Microsoft Sentinel), cloud security knowledge (Azure/AWS/GCP), and strong English communication.