> Markdown version of [/jobs/ext/3108874-siem-analyst-threat-detection-incident-response](https://www.wearedevelopers.com/jobs/ext/3108874-siem-analyst-threat-detection-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Siem Analyst - Threat Detection & Incident Response

- **Company:** Fosh
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Log Analysis, Security Information and Event Management, Splunk
- **Published:** September 27, 2026
- **Apply:** https://www.buscojobs.com.es/siem-analyst-threat-detection-incident-response-en-madrid-ID-372582334

## About the Role

FoshTech is seeking an experienced SIEM/Log Analysis specialist to collect, normalize, and analyze security logs from diverse sources.
You will develop dashboards, alerts, and use SIEM platforms to detect threats, investigate incidents, and conduct forensic analysis.Collaboration with the Information Security Team and ongoing detection improvement are essential.
Ideal candidates have 3+ years in SIEM/log operations, strong Splunk and CrowdStrike experience, and a solid foundation in networking#J-*****-Ljbffr

## Description

FoshTech is seeking an experienced SIEM/Log Analysis specialist to collect, normalize, and analyze security logs from diverse sources.You will develop dashboards, alerts, and use SIEM platforms to detect threats, investigate incidents, and conduct forensic analysis.Collaboration with the Information Security Team and ongoing detection improvement are essential.Ideal candidates have 3+ years in SIEM/log operations, strong Splunk and CrowdStrike experience, and a solid foundation in networking#J-*****-Ljbffr


## Related Videos

- [ The attacker's footprint](https://www.wearedevelopers.com/videos/375-the-attacker-s-footprint)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)