OverviewIn this role you will join a integral Security Operations Centre to protect critical environments and support international clients against evolving threats.

You will work hands-on with a cross?border team to monitor, detect, investigate and respond to security incidents, improving threat detection and incident handling.

You'll engage with clients to understand their environments and tailor monitoring, reporting and remediation.

This role offers meaningful impact in a fast-paced, technologically diverse setting.

Compensaciones / Beneficiosremote work capability professional growth opportunities multicultural international team private medical insurance life insurance lunch and transport card

ResponsabilidadesMonitor, triage, and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments

Investigate threats and incidents, determine root causes and remediation actions

Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network systems

Collaborate with Incident Response teams to contain and resolve threats

Use and maintain security monitoring/detection tools to improve detection and reduce false positives

Prepare security reports, incident summaries and technical findings for clients

Manage security-related tickets and documentation

Contribute to SOC processes, documentation, and knowledge bases





Engage with clients to understand environments and optimize monitoring

Stay updated on threats, technologies and best practices

Requisitos principales5+ years in IT, Cybersecurity or Security Operations

Hands-on SOC experience with alert triage and incident investigation

Strong knowledge of SIEM and EDR technologies

Experience with Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK

Experience with Microsoft security technologies (Defender for Endpoint, M365, Sentinel, Azure Security and XDR)

Strong understanding of Azure, AWS and/or GCP

Experience with at least one EDR (e.g., Defender for Endpoint or CrowdStrike)

Strong networking knowledge (TCP/IP)

Excellent experience analyzing logs across Windows and Linux

Knowledge of email security, network monitoring and incident response

Experience managing and processing security tickets

Excellent spoken and written English

Desirable: Incident Response tier I/II experience

Desirable: AWS monitoring (IaaS/PaaS/SaaS) experience

Desirable: Scripting (Python/PowerShell/Bash/Ruby)

Desirable: Cybersecurity certifications (SC-200, GCIH, CEH, GCFA, GIAC, CCNA, MCSE)

Desirable: Global, distributed SOC experience

Proactive mindset

Collaborative/team-oriented

Strong communication and client-facing skills

SIEM

EDR

Microsoft Sentinel

📌 Senior Cybersecurity Analyst - (Cyber Defense Operations) - Talan (Valencia)
🏢 Talan
📍 Valencia