Talan

Security Operations

• Enhance threat detection and cybersecurity operations capabilities within the Cyber Security Operations Center
• Develop, implement, validate, tune and maintain security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Operate, maintain, optimize and continuously improve security monitoring and threat detection services
• Onboard, integrate, test and validate security data sources, telemetry feeds and monitoring capabilities
• Manage security content and detection use case lifecycles, including rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams
• Participate in cybersecurity architecture reviews and provide recommendations
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review detection effectiveness, monitoring configurations, operational processes and service deliverables
• Analyze operational feedback to reduce false positives and improve detection quality
• Contribute to quality assurance, process reviews, control validation, service quality assessments and corrective actions
• Maintain CSOC procedures, standards, documentation, knowledge base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to stakeholders
• Participate in rotating on-call coverage and resolve critical system incidents when required

Security Operations Analyst – SIEM Operations, Threat Detection

• Contribute to the development, implementation, validation, tuning and maintenance of security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Support the operation, maintenance, optimization and continuous improvement of security monitoring and threat detection services
• Participate in onboarding, integration, testing and validation of security data sources, telemetry feeds and monitoring capabilities
• Contribute to security content management, including use case lifecycle management, rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams to translate requirements into detection and monitoring capabilities
• Participate in cybersecurity architecture reviews and provide recommendations to improve security monitoring and detection effectiveness
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review and assess detections, monitoring configurations, operational processes and service deliverables, identifying improvement opportunities
• Analyze operational feedback to support tuning, optimization, false-positive reduction and improved detection quality
• Contribute to quality assurance activities, process reviews, control validation, service quality assessments and corrective actions
• Support development, review and maintenance of CSOC procedures, standards, documentation, knowledge base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to internal and external stakeholders
• Participate in a rotating on-call schedule to resolve critical system incidents when required

• Enhance threat detection and cybersecurity operations capabilities within the Cyber Security Operations Center
• Develop, implement, validate, tune and maintain security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Operate, maintain, optimize and continuously improve security monitoring and threat detection services
• Onboard, integrate, test and validate security data sources, telemetry feeds and monitoring capabilities
• Manage security content, including detection use-case lifecycles, rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams to translate requirements into detection and monitoring capabilities
• Participate in cybersecurity architecture reviews and provide recommendations to improve monitoring and detection effectiveness
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review and assess detections, monitoring configurations, operational processes and service deliverables, identifying improvement opportunities
• Analyze operational feedback to optimize tuning, reduce false positives and improve detection quality
• Contribute to quality assurance, process reviews, control validation, service quality assessments and corrective actions
• Maintain CSOC procedures, standards, documentation, knowledge-base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to internal and external stakeholders
• Participate in the mandatory rotating on-call schedule to resolve critical incidents when required

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
• Use and maintain security monitoring and detection tools, improving detection quality and reducing false positives
• Prepare security reports, incident summaries and technical findings for clients
• Manage security-related tickets and ensure incidents are properly documented
• Improve SOC processes, procedures, documentation and knowledge bases
• Work directly with clients to understand their environments and optimize security monitoring
• Stay up to date with emerging threats, technologies and cybersecurity best practices

Senior Cybersecurity Analyst – Cyber Defense Operations

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
• Use and maintain security monitoring and detection tools, helping improve detection quality and reduce false positives
• Prepare clear security reports, incident summaries and technical findings for clients
• Manage security-related tickets and ensure incidents are properly documented
• Contribute to improving SOC processes, procedures, documentation and knowledge bases
• Work directly with clients to understand their environments and optimize security monitoring
• Stay up to date with emerging threats, technologies and cybersecurity best practices

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
• Use and maintain security monitoring and detection tools, helping improve detection quality and reduce false positives
• Prepare clear security reports, incident summaries and technical findings for clients
• Manage security-related tickets and ensure incidents are properly documented
• Contribute to improving SOC processes, procedures, documentation and knowledge bases
• Work directly with clients to understand their environments and optimize security monitoring
• Stay up to date with emerging threats, technologies and cybersecurity best practices
• Work as part of a 24x7 Security Operations Centre supporting international organizations against evolving cyber threats

• Act as the primary point of contact and trusted advisor for assigned clients
• Own client relationships at operational and management levels and maintain executive sponsor connections
• Understand client business drivers, operating calendars, and roadmaps
• Support renewals, satisfaction, and retention by monitoring contract terms, scope evolution, and consumption
• Prepare evidence and action plans with Sales
• Lead daily delivery by planning activities, assigning tickets, coordinating resources, and resolving issues to meet SLA and SLO commitments
• Oversee monitoring, preventive maintenance, SAP S/4HANA Cloud release readiness, and priority incident management
• Conduct post-incident reviews and ensure root-cause follow-through
• Govern services through meetings, performance reporting, and management of risks, escalations, quality, budgets, invoicing, and margin
• Move accounts from stabilization to continuous improvement using the Continuous Value Operations model
• Maintain an improvement backlog covering automation, recurring incident elimination, process simplification, clean-core alignment, and adoption gaps
• Identify and qualify Evolution and consulting opportunities and provide business context to Sales and Customer Solution teams
• Coach and develop assigned consultants
• Adjust workload, participate in staffing decisions, and support service continuity through skills development, knowledge transfer, and succession planning
• Lead new-client transitions into AMS after go-live, including knowledge transfer, hypercare handover, and steady-state governance
• Establish and maintain structured client knowledge bases
• Embed documentation into service workflows
• Use Talan’s AI delivery tools daily, drive adoption, contribute real cases, prompts, and improvement ideas
• Remain current on relevant SAP capabilities, including Joule

Customer Evolution Manager, SAP AMS

• Act as the primary point of contact and trusted advisor for assigned clients
• Own client relationships at operational and management levels and maintain executive sponsor connections
• Understand client business drivers, operating calendars, and roadmaps
• Support renewals, satisfaction, and retention by monitoring contract terms, scope evolution, and consumption
• Lead daily delivery by planning activities, assigning tickets, coordinating resources, and resolving issues to meet SLA and SLO commitments
• Oversee monitoring, preventive maintenance, SAP S/4HANA Cloud release readiness, and priority incident management
• Conduct post-incident reviews and ensure root-cause follow-through
• Govern services through meetings, performance reporting, and management of risks, escalations, quality, budgets, invoicing, and margin
• Move accounts from stabilization to continuous improvement through explicit client objectives
• Maintain an improvement backlog covering automation, recurring incident elimination, process simplification, clean-core alignment, and adoption gaps
• Identify and qualify Evolution and consulting opportunities and provide business context to Sales and Customer Solution teams
• Coach and develop consultants assigned to the portfolio
• Adjust workload, participate in staffing decisions, and support service continuity through skills development, knowledge transfer, and succession planning
• Lead new-client transition into AMS after go-live, including knowledge transfer, hypercare handover, and steady-state governance
• Establish and maintain structured client knowledge bases
• Embed documentation into service workflows
• Use Talan’s AI delivery tools daily, drive adoption, and contribute cases, prompts, and improvement ideas
• Remain current on relevant SAP capabilities, including Joule

• Act as the primary point of contact and trusted advisor for assigned SAP clients
• Own client relationships at operational and management levels and maintain executive sponsor connections
• Understand client business drivers, operating calendars, and roadmaps
• Support renewals, satisfaction, and retention by monitoring contract terms, scope evolution, and consumption
• Prepare renewal evidence and action plans with Sales
• Lead daily delivery by planning activities, assigning tickets, coordinating resources, and resolving issues
• Meet SLA and SLO commitments
• Oversee monitoring, preventive maintenance, SAP S/4HANA Cloud release readiness, and priority incident management
• Conduct post-incident reviews and root-cause follow-through
• Govern services through regular meetings and performance reporting
• Manage risks, escalations, quality, budgets, invoicing, and margin
• Move accounts from stabilization toward continuous improvement through explicit client objectives
• Maintain an improvement backlog covering automation, recurring incident elimination, process simplification, clean-core alignment, and adoption gaps
• Identify and qualify Evolution and consulting opportunities and provide business context to Sales and Customer Solution teams
• Coach and develop consultants assigned to the portfolio
• Adjust workload, participate in staffing decisions, and support service continuity through skills development, knowledge transfer, and succession planning
• Lead new-client transitions into AMS after go-live, including knowledge transfer, hypercare handover, and steady-state governance
• Establish and maintain structured client knowledge bases
• Embed documentation into service workflows
• Use Talan’s AI delivery tools daily, drive adoption, contribute real cases, prompts, and improvement ideas
• Remain current on relevant SAP capabilities, including Joule