We are recruiting for a positionSOC SIEM EMEAto our client located inValencia, Spainas a contract role.5+ yrs IT incl. alert triage; hands‑on SIEM administration (Splunk or Microsoft Sentinel); detection content and use‑case lifecycle; data‑source onboarding; Microsoft security stack; Azure/AWS/GCP; EDRSIEM architecture from design to build, ingestion pipelines across cloud and on‑prem; AWS monitoring; scripting. Certs: SC-200, GCIH, CEH, GCFA or similar.Required Profile:The incumbent will be part of the Cybersecurity Operations Section (CSO) to provide front line support to Partners in the area of information/cyber security, risk management consulting, and security operations activities in collaboration with a team of information and cyber security experts.Required Technical Skills:A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidentsProven experience on administering a SIEM platform,



preferably either Splunk or Microsoft Sentinel SIEMProven experience with the usual toolbox available in a SOC (e.G., SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response teamDeep knowledge of Microsoft Security Tools (e.G. M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDRDeep Knowledge of Cloud technologies (e.G. Azure, AWS and GCP)Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK StackKnowledge of at least one EDR solution (MS Defender for Endpoint, CrowdStrike)Knowledge of email security, network monitoring, and incident responseKnowledge of Linux/Mac/WindowsKnowledge of at least one general-purpose or shell scripting language (e.G. Ruby, Bash, PowerShell, Python, etc.)Desirable certifications:Technical certifications: MCSE, CCNA, Microsoft Azure (e.G., SC-200), GCIH, CEH, GCFA or any GIAC/similar certification#J-18808-Ljbffr

📌 Soc Siem Emea (Madrid)
🏢 Mouri Tech
📍 Madrid