Security Operations Analyst (Cyber Defense Operations)
⚲ Valencia, Paris
Do uzgodnienia
Wymagania
- Microsoft Sentinel
- CrowdStrike
- Splunk
- PowerShell
Opis stanowiska
About the Opportunity
Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team.
You’ll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.
This is a hands-on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.
What You’ll Do
- Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
- Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
- Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.
- Support incident response, remediation, and recovery activities.
- Work closely with Incident Response and other cybersecurity teams to manage security threats.
- Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data.
- Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.
- Gather technical information from clients to improve security monitoring and detection.
- Prepare and present security reports, summaries, and technical findings.
- Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes.
- Review operational feedback and implement corrective actions to continuously improve service quality.
Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team.
You’ll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.
This is a hands-on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.
What You’ll Do
- Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
- Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
- Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.
- Support incident response, remediation, and recovery activities.
- Work closely with Incident Response and other cybersecurity teams to manage security threats.
- Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data.
- Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.
- Gather technical information from clients to improve security monitoring and detection.
- Prepare and present security reports, summaries, and technical findings.
- Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes.
- Review operational feedback and implement corrective actions to continuously improve service quality.
🔍 Dekoder Ogłoszenia
✓ Ogłoszenie wygląda transparentnie — brak typowych czerwonych flag.