Security Operations

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
• Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation
• Support incident response, remediation, and recovery activities
• Work closely with Incident Response and other cybersecurity teams to manage security threats
• Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data
• Identify opportunities to improve detection quality and reduce false positives through tuning and optimization
• Gather technical information from clients to improve security monitoring and detection
• Prepare and present security reports, summaries, and technical findings
• Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes
• Review operational feedback and implement corrective actions to continuously improve service quality

Security Operations Analyst – Cyber Defense Operations

• Develop, implement, validate, tune, and maintain security monitoring and detection capabilities
• Administer and optimize SIEM platforms across multiple customer environments
• Manage security detection rules and use cases throughout their lifecycle
• Onboard, integrate, test, and validate new security data sources and telemetry feeds
• Review and improve detection logic, security content, and monitoring configurations
• Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities
• Support cybersecurity architecture reviews and provide recommendations to improve security monitoring
• Build and maintain security metrics, dashboards, KPIs, and service-performance reports
• Evaluate detection effectiveness and identify opportunities to reduce false positives
• Contribute to quality assurance, process reviews, control validation, and corrective actions
• Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance
• Prepare technical reports, findings, and recommendations for internal and external stakeholders

Security Operations Analyst – SIEM, Threat Detection

• Enhance threat detection and cybersecurity operations capabilities within the Cyber Security Operations Center
• Develop, implement, validate, tune and maintain security monitoring, analytics and detection capabilities across SIEM, EDR, cloud and other cybersecurity platforms
• Operate, maintain, optimize and continuously improve security monitoring and threat detection services
• Onboard, integrate, test and validate security data sources, telemetry feeds and monitoring capabilities
• Manage security content, including detection use-case lifecycles, rule reviews, testing, tuning and content quality assurance
• Collaborate with cyber threat intelligence, incident response and cybersecurity operations teams to translate requirements into detection and monitoring capabilities
• Participate in cybersecurity architecture reviews and provide recommendations to improve monitoring and detection effectiveness
• Prepare and maintain cybersecurity operations metrics, dashboards, KPIs and service performance reports
• Review and assess detections, monitoring configurations, operational processes and service deliverables, identifying improvement opportunities
• Analyze operational feedback to optimize tuning, reduce false positives and improve detection quality
• Contribute to quality assurance, process reviews, control validation, service quality assessments and corrective actions
• Maintain CSOC procedures, standards, documentation, knowledge-base articles and operational guidance
• Prepare and present technical reports, summaries, findings and recommendations to internal and external stakeholders
• Participate in the mandatory rotating on-call schedule to resolve critical incidents when required

Security Operations Analyst – SIEM Operations, Threat Detection

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
• Use and maintain security monitoring and detection tools, improving detection quality and reducing false positives
• Prepare security reports, incident summaries and technical findings for clients
• Manage security-related tickets and ensure incidents are properly documented
• Improve SOC processes, procedures, documentation and knowledge bases
• Work directly with clients to understand their environments and optimize security monitoring
• Stay up to date with emerging threats, technologies and cybersecurity best practices

Senior Cybersecurity Analyst – Cyber Defense Operations

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats
• Use and maintain security monitoring and detection tools, helping improve detection quality and reduce false positives
• Prepare clear security reports, incident summaries and technical findings for clients
• Manage security-related tickets and ensure incidents are properly documented
• Contribute to improving SOC processes, procedures, documentation and knowledge bases
• Work directly with clients to understand their environments and optimize security monitoring
• Stay up to date with emerging threats, technologies and cybersecurity best practices

• Act as a central point of contact for alert triage, incident identification and security event investigation across EPI environments
• Execute incident response activities using structured frameworks such as SANS PICERL
• Conduct proactive, hypothesis-driven threat hunts based on attacker behaviour, emerging threats, threat intelligence and MITRE ATT&CK techniques
• Parse, analyse and correlate logs from authentication, application, system, endpoint and cloud telemetry sources, including AWS and Azure
• Design, tune and maintain detection rules, use cases, dashboards, custom alerts and automation workflows
• Contribute to SOC playbooks, runbooks, SIEM and EDR integrations
• Document and communicate threat findings, incident outcomes and remediation recommendations
• Collaborate with engineering, SOC, IR and IT teams to improve detection coverage, response readiness and operational resilience

Security Operations jobs in Spain

Security Operations Analyst – Cyber Defense Operations

Security Operations Analyst – SIEM, Threat Detection

Security Operations Analyst – SIEM Operations, Threat Detection

Senior Cybersecurity Analyst – Cyber Defense Operations

Senior Cybersecurity Analyst – Cyber Defense Operations

Security Operations Engineer