Security Operations Analyst (Cyber Defense Operations)

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.

• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.

• Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.

• Support incident response, remediation, and recovery activities.

• Work closely with Incident Response and other cybersecurity teams to manage security threats.

• Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data.

• Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.

• Gather technical information from clients to improve security monitoring and detection.

• Prepare and present security reports, summaries, and technical findings.

• Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes.

• Review operational feedback and implement corrective actions to continuously improve service quality.

Location: Valencia, Spain, Hybrid OR Remote across EMEA
Employment: Full-Time Contract
Duration: 6 months, with potential extension
Language: Fluent English required
Industry: Cybersecurity / Cloud / Enterprise Security

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team.

You'll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.

This is a hands-on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.

• Work inside a global 24/7 cybersecurity operation protecting international organizations.

• Gain exposure to large-scale cloud, SIEM, EDR, network, and endpoint security environments.

• Collaborate with cybersecurity specialists across multiple regions and disciplines.

• Work directly on real-world threat detection and incident response.

• Build experience across a broad enterprise security technology stack.