Security Operations Analyst (SIEM & Threat Detection)

Overview

Security Operations Analyst focused on SIEM administration, detection engineering, security content, data-source onboarding, and detection optimization. The role supports cybersecurity monitoring across multiple customer environments and international organizations.

What you'll do

• Develop, validate, tune, and maintain security monitoring capabilities.
• Administer and optimize SIEM platforms across customer environments.
• Manage detection rules and use cases through their lifecycle.
• Onboard, integrate, test, and validate security data sources.
• Collaborate with Threat Intelligence and Incident Response teams on detection capabilities.
• Build security metrics, dashboards, KPIs, and service-performance reports.
• Maintain SOC procedures, documentation, knowledge bases, and operational guidance.

What you'll need

• 5+ years of relevant IT or cybersecurity experience.
• Hands-on SIEM administration experience, ideally with Splunk or Microsoft Sentinel.
• Experience with SIEM/EDR environments and technical security analysis.
• Knowledge of Microsoft Security technologies.
• Cloud security knowledge across Azure, AWS, and/or GCP.
• Experience with an EDR platform such as Microsoft Defender for Endpoint or CrowdStrike.
• Fluent English with strong written and verbal communication skills.

Nice to have

• Experience designing SIEM architecture from design through implementation.
• Experience building data-ingestion pipelines for cloud and on-premise log sources.
• AWS security monitoring experience.
• Scripting experience with Python, PowerShell, Bash, Ruby, or similar.
• Security certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.
• Experience working across multiple customer environments.

Details

• Location: Valencia, Spain.
• Work mode: Hybrid or remote across EMEA.
• Employment type: Full-time contract.
• Contract duration: 6 months, with potential extension.