Senior Cybersecurity Analyst – Cyber Defense Operations

. Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments .

Posted 9/25/2026full-timeRemote • SpainSeniorWebsite

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsGoogle Cloud PlatformLinuxPythonRubySplunkTCP/IP

Key responsibilities & impact

Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
Use and maintain security monitoring and detection tools, helping improve detection quality and reduce false positives
Prepare clear security reports, incident summaries and technical findings for clients
Manage security-related tickets and ensure incidents are properly documented
Contribute to improving SOC processes, procedures, documentation and knowledge bases
Work directly with clients to understand their environments and optimize security monitoring
Stay up to date with emerging threats, technologies and cybersecurity best practices

What you’ll need

5+ years of experience in IT, Cybersecurity or Security Operations
Hands-on experience working in a SOC environment, including security alert triage and incident investigation
Strong knowledge of SIEM and EDR technologies
Experience with platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK
Experience with Microsoft Security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR
Strong understanding of Azure, AWS and/or GCP
Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike
Strong knowledge of networking and TCP/IP
Excellent experience analyzing security logs across Windows and Linux environments
Knowledge of email security, network monitoring and incident response
Experience managing and processing security tickets
Excellent spoken and written English
Plus: Experience working in an Incident Response team, particularly Tier I/II
Plus: Experience monitoring AWS environments, including IaaS, PaaS and SaaS
Plus: Scripting experience with Python, PowerShell, Bash, Ruby or similar
Plus: Cybersecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE
Plus: Experience working in a global, distributed SOC

Comp & perks

Full-time and permanent employment contract or contractor mode
Remote location in Spain or any other European country
Professional growth possibilities & learning opportunities
Possibility to join a multicultural team & work in the international environment
Private medical insurance
Life insurance
Lunch and transport card as part of the flexible remuneration pack
Online language classes
Smart Office Pack