Senior Cybersecurity Analyst – Cyber Defense Operations

. Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments .

Posted 9/25/2026full-timeRemote • SpainSeniorWebsite

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsGoogle Cloud PlatformLinuxPythonRubySplunkTCP/IP

Key responsibilities & impact

Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
Use and maintain security monitoring and detection tools, improving detection quality and reducing false positives
Prepare security reports, incident summaries and technical findings for clients
Manage security-related tickets and ensure incidents are properly documented
Improve SOC processes, procedures, documentation and knowledge bases
Work directly with clients to understand their environments and optimize security monitoring
Stay up to date with emerging threats, technologies and cybersecurity best practices

What you’ll need

5+ years of experience in IT, Cybersecurity or Security Operations
Hands-on experience working in a SOC environment, including security alert triage and incident investigation
Strong knowledge of SIEM and EDR technologies
Experience with Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK
Experience with Microsoft Security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR
Strong understanding of Azure, AWS and/or GCP
Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike
Strong knowledge of networking and TCP/IP
Excellent experience analyzing security logs across Windows and Linux environments
Knowledge of email security, network monitoring and incident response
Experience managing and processing security tickets
Excellent spoken and written English
Experience working in an Incident Response team, particularly Tier I/II, is a plus
Experience monitoring AWS environments, including IaaS, PaaS and SaaS, is a plus
Scripting experience with Python, PowerShell, Bash, Ruby or similar is a plus
Cybersecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE are a plus
Experience working in a global, distributed SOC is a plus

Comp & perks

Professional growth possibilities & learning opportunities
Possibility to join a multicultural team & work in the international environment
Private medical insurance
Life insurance
Lunch and transport card as part of the flexible remuneration pack
Online language classes
Smart Office Pack
Remote work from Spain or another European country