> Markdown version of [/jobs/ext/3131092-security-operations-analyst-siem-threat-detection](https://www.wearedevelopers.com/jobs/ext/3131092-security-operations-analyst-siem-threat-detection). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Operations Analyst (SIEM & Threat Detection) - **Company:** Pragmatike - **Location:** Valencia, Spain - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Microsoft Security Essentials, Network Monitoring, Windows PowerShell, ArcSight SIEM Tool, Ruby, Security Information and Event Management, Scripting, Data Ingestion, QRadar, Cyber Threat Analysis, Azure Security Center, Microsoft Sentinel, Splunk - **Published:** September 28, 2026 - **Apply:** https://www.adzuna.es/details/5900436426 ## About the Role * 5+ years of relevant IT/cybersecurity experience. * Proven hands-on experience administering a SIEM platform, ideally Splunk or Microsoft Sentinel. * Strong experience with SIEM/EDR environments and technical security analysis. * Deep knowledge of Microsoft Security technologies. * Strong cloud security knowledge across Azure, AWS, and/or GCP. * Experience with platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK. * Experience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike. * Knowledge of email security, network monitoring, and incident response. * Strong Linux, macOS, and Windows knowledge. * Fluent English with excellent written and verbal communication skills. Nice to Have * Experience designing SIEM architecture from initial design through implementation. * Experience building data-ingestion pipelines for diverse cloud and on-premise log sources. * AWS security monitoring experience. * Scripting experience with Python, PowerShell, Bash, Ruby, or similar. * Security certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE. * Experience working across multiple customer environments. ## Description Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection. You'll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments. Unlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization. You'll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging threats into effective, measurable detection capabilities. What You'll Do * Develop, implement, validate, tune, and maintain security monitoring and detection capabilities. * Administer and optimize SIEM platforms across multiple customer environments. * Manage security detection rules and use cases throughout their lifecycle. * Onboard, integrate, test, and validate new security data sources and telemetry feeds. * Review and improve detection logic, security content, and monitoring configurations. * Collaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities. * Support cybersecurity architecture reviews and provide recommendations to improve security monitoring. * Build and maintain security metrics, dashboards, KPIs, and service-performance reports. * Evaluate detection effectiveness and identify opportunities to reduce false positives. * Contribute to quality assurance, process reviews, control validation, and corrective actions. * Maintain SOC procedures, standards, documentation, knowledge bases, and operational guidance. * Prepare technical reports, findings, and recommendations for internal and external stakeholders., * Work beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities. * Gain exposure to large-scale SIEM, EDR, cloud, and threat-detection environments. * Work directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams. * Help shape detection use cases, monitoring architecture, and operational processes. * Work on cybersecurity services supporting multiple international organizations. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)