Security Operations Analyst (SIEM & Threat Detection)

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection.

You'll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments.

Unlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization.

You'll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging threats into effective, measurable detection capabilities.

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities.

• Administer and optimize SIEM platforms across multiple customer environments.

• Manage security detection rules and use cases throughout their lifecycle.

• Onboard, integrate, test, and validate new security data sources and telemetry feeds.

• Review and improve detection logic, security content, and monitoring configurations.

• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.

• Support cybersecurity architecture reviews and provide recommendations to improve security monitoring.

• Build and maintain security metrics, dashboards, KPIs, and service-performance reports.

• Evaluate detection effectiveness and identify opportunities to reduce false positives.

• Contribute to quality assurance, process reviews, control validation, and corrective actions.

• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.

• Prepare technical reports, findings, and recommendations for internal and external stakeholders.

Location: Valencia, Spain, Hybrid OR Remote across EMEA
Employment: Full-Time Contract
Duration: 6 months, with potential extension
Language: Fluent English required
Industry: Cybersecurity / SIEM / Cloud Security

• Work beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities.

• Gain exposure to large-scale SIEM, EDR, cloud, and threat-detection environments.

• Work directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams.

• Help shape detection use cases, monitoring architecture, and operational processes.

• Work on cybersecurity services supporting multiple international organizations.