Company Description Talan is an international consulting group specializing in innovation and business transformation through technology. Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI. Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency. We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies. We work with major general clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications. We are looking to join a Senior consultant within the Cyber Security Operations Center (CSOC) , The role is primarily focused on enhancing threat detection and cybersecurity operations capabilities through activities such as security content management, quality assurance and validation of detection mechanisms, detection use case lifecycle management, onboarding and integration of new security data sources, reporting, and process optimization. This is an excellent opportunity for professionals interested in working within a large-scale international cybersecurity environment, where they will play a key role in the continuous improvement of security monitoring and threat detection services across multiple customer landscapes. Security Operations, Threat Detection Engineering, SIEM optimization, cyber risk management, and operational excellence ,



Contribute to the development, implementation, validation, tuning, and maintenance of security monitoring, analytics, and detection capabilities across SIEM, EDR, cloud, and other cybersecurity platforms. Support the operation, maintenance, optimization, and continuous improvement of security monitoring and threat detection services. Participate in the onboarding, integration, testing, and validation of security data sources, telemetry feeds, and monitoring capabilities. Contribute to security content management activities, including use case lifecycle management, rule reviews, testing, tuning, and content quality assurance. Collaborate with cyber threat intelligence, incident response, and cybersecurity operations teams to translate operational and threat intelligence requirements into effective detection and monitoring capabilities. Under guidance, participate in cybersecurity architecture reviews of new or existing solutions and provide recommendations to enhance security monitoring and detection effectiveness. Contribute to the preparation and maintenance of cybersecurity operations metrics, dashboards, KPIs, and service performance reports. Review, validate, and assess the effectiveness of detections, monitoring configurations, operational processes, and service deliverables, identifying opportunities for improvement.



Gather and analyze operational feedback to identify opportunities for tuning, optimization, reduction of false positives, and improvement of overall detection quality. Contribute to quality assurance activities, including process reviews, control validation, service quality assessments, and implementation of corrective actions. On-Call Availability (On-Call Shift System) You will be required to participate in a rotating on-call shift schedule from Monday to Sunday. or during late-night shifts. 5 years of relevant experience in information technology field, including triage of alerts and supporting security incidents Splunk or Microsoft SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response team Microsoft Security Tools (M365, Cloud App Security, Azure, Defender for Endpoints, Azure Security, Azure Sentinel and XDR) Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP ) Splunk, QRadar, ArcSight, MS Sentinel, ELK Stac Knowledge of email security, network monitoring, and incident response Linux/Mac/Windows C1 English proficiency Experience in building SIEM architectures from initial design to implementation, including designing data ingestion pipelines for diverse log sources across cloud and on-prem environments Proven knowledge of monitoring AWS environment (Iaas, Saas, Paas) Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.) MCSE, CCNA, Microsoft Azure (e.g., Remote Position Freelance, full-time contract. Training and career development. Possibility to be part of a multicultural team and work on international projects. If you are passionate about data, development & tech, we

📌 Senior Business Security Analyst (La Coruña)
🏢 Talan
📍 La Coruña