Security Operations Analyst (Cyber Defense Operations)

Overview

Security Operations Analyst supporting a global 24/7 SOC with monitoring, threat detection, investigation, and incident response across enterprise, cloud, network, and endpoint environments.

What you'll do

• Monitor and investigate alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
• Analyze Windows, Linux, database, application, web server, firewall, and network logs.
• Identify root causes and determine remediation or escalation actions.
• Support incident response, remediation, and recovery activities.
• Analyze TCP/IP, syslog, firewall, and network monitoring data.
• Improve detection quality through tuning and false-positive reduction.
• Prepare security reports, technical findings, procedures, and knowledge-base content.

What you'll need

• 5+ years of relevant IT or cybersecurity experience.
• Experience with security alert triage and incident support.
• Hands-on experience in a SOC environment.
• Strong SIEM and EDR experience.
• Advanced log analysis across operating systems, databases, applications, and infrastructure.
• Knowledge of Microsoft Sentinel, Defender, and Azure, AWS, and/or GCP security.
• Fluent English with strong written and verbal communication skills.

Nice to have

• Incident Response team experience involving Tier-1 or Tier-2 triage.
• AWS security monitoring experience.
• Scripting experience with Python, PowerShell, Bash, Ruby, or similar.
• Relevant cybersecurity or networking certifications.
• Customer-facing cybersecurity experience.

Details

• Location: Valencia, Spain, or remote across EMEA.
• Work mode: Hybrid or remote.
• Employment: Full-time contract.
• Contract duration: 6 months, with potential extension.
• Fluent English required.