Location: Valencia, Spain, Hybrid OR Remote across EMEA
Employment: Full-Time Contract
Duration: 6 months, with potential extension
Language: Fluent English required
Industry: Cybersecurity / SIEM / Cloud Security

About the Opportunity

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection .

You’ll join a general Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments.

Unlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization .

You’ll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging threats into effective, measurable detection capabilities.

What You’ll Do

- Develop, implement, validate, tune, and maintain security monitoring and detection capabilities .

- Administer and optimize SIEM platforms across multiple customer environments.

- Manage security detection rules and use cases throughout their lifecycle.

- Onboard, integrate, test, and validate new security data sources and telemetry feeds .

- Review and improve detection logic, security content, and monitoring configurations.

- Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.

- Support cybersecurity architecture reviews and provide recommendations to improve security monitoring.

- Build and maintain security metrics, dashboards, KPIs, and service-performance reports .

- Evaluate detection effectiveness and identify opportunities to reduce false positives.

- Contribute to quality assurance, process reviews, control validation, and corrective actions.





- Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.

- Prepare technical reports, findings, and recommendations for internal and external stakeholders.

What We’re Looking For

- 5+ years of relevant IT/cybersecurity experience.

- Proven hands-on experience administering a SIEM platform , ideally Splunk or Microsoft Sentinel.

- Strong experience with SIEM/EDR environments and technical security analysis.

- Deep knowledge of Microsoft Security technologies .

- Strong cloud security knowledge across Azure, AWS, and/or GCP .

- Experience with platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK .

- Experience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike .

- Knowledge of email security, network monitoring, and incident response.

- Strong Linux, macOS, and Windows knowledge.

- Fluent English with excellent written and verbal communication skills.

Nice to Have

- Experience designing SIEM architecture from initial design through implementation .

- Experience building data-ingestion pipelines for diverse cloud and on-premise log sources.

- AWS security monitoring experience.

- Scripting experience with Python, PowerShell, Bash, Ruby , or similar.

- Security certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE .

- Experience working across multiple customer environments.

Why Join

- Work beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities .

- Gain exposure to large-scale SIEM, EDR, cloud, and threat-detection environments .

- Work directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams.

- Help shape detection use cases, monitoring architecture, and operational processes.

- Work on cybersecurity services supporting multiple international organizations.

Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate base

📌 Security Operations Analyst (España)
🏢 Pragmatike
📍 España