{"id":1253799,"url":"https://alion.io/job/pragmatike-security-operations-analyst-cyber-defense-operations-2","title":"Security Operations Analyst (Cyber Defense Operations)","company":{"id":8591,"name":"Pragmatike","domain":"pragmatike.com","url":"https://alion.io/company/pragmatike","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lecce, Italy","Valencia, Spain","Elche, Spain","Italy"],"countries":["IT","ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":133000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":19},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Bash","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Ruby","optional":true}],"status":"live","first_seen_at":"2026-09-25T18:05:13Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-21T17:44:16Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"Location: Valencia, Spain, Hybrid OR Remote across EMEA\nEmployment: Full-Time Contract\nDuration: 6 months, with potential extension\nLanguage: Fluent English required\nIndustry: Cybersecurity / Cloud / Enterprise Security\nAbout the Opportunity\nPragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team.\nYou’ll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.\nThis is a hands-on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.\nWhat You’ll Do\nMonitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.\n\nAnalyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.\n\nInvestigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.\n\nSupport incident response, remediation, and recovery activities.\n\nWork closely with Incident Response and other cybersecurity teams to manage security threats.\n\nAnalyze network and security events using TCP/IP, syslog, firewall, and network monitoring data.\n\nIdentify opportunities to improve detection quality and reduce false positives through tuning and optimization.\n\nGather technical information from clients to improve security monitoring and detection.\n\nPrepare and present security reports, summaries, and technical findings.\n\nContribute to SOC procedures, documentation, knowledge bases, and quality-control processes.\n\nReview operational feedback and implement corrective actions to continuously improve service quality.\n\nWhat We’re Looking For\n5+ years of relevant experience in IT/cybersecurity, including security alert triage and incident support.\n\nHands-on experience working in a SOC environment.\n\nStrong experience with SIEM and EDR platforms.\n\nAdvanced log analysis skills across Windows/Linux, databases, applications, and infrastructure.\n\nStrong knowledge of Microsoft Security technologies, including Microsoft Sentinel and Defender.\n\nExperience with cloud security across Azure, AWS, and/or GCP.\n\nExperience with SIEM platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK.\n\nExperience with at least one EDR solution such as Microsoft Defender for Endpoint or CrowdStrike.\n\nKnowledge of email security, network monitoring, and incident response.\n\nStrong knowledge of Linux, macOS, and Windows.\n\nFluent English with excellent written and verbal communication skills.\n\nNice to Have\nExperience working on an Incident Response team with Tier-1/Tier-2 incident triage.\n\nAWS security monitoring experience across IaaS, PaaS, or SaaS environments.\n\nScripting experience with Python, PowerShell, Bash, Ruby, or similar.\n\nCertifications such as Microsoft SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.\n\nCustomer-facing cybersecurity experience.\n\nWhy Join\nWork inside a global 24/7 cybersecurity operation protecting international organizations.\n\nGain exposure to large-scale cloud, SIEM, EDR, network, and endpoint security environments.\n\nCollaborate with cybersecurity specialists across multiple regions and disciplines.\n\nWork directly on real-world threat detection and incident response.\n\nBuild experience across a broad enterprise security technology stack.\n\nPragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation.\nIn accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration.","description_format":"text","description_chars":4055,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-25T18:43:10Z"}],"visa":[],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.497,"p_room":0.9,"age_days":25,"expected_fill_days":41,"reasons":["conf:2","agency","velocity","win:mid"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/pragmatike-security-operations-analyst-cyber-defense-operations-2","json_url":"https://alion.io/job/pragmatike-security-operations-analyst-cyber-defense-operations-2.json","meta":{"generated_at":"2026-10-21T19:33:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27759,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8591},"rest":"https://alion.io/mcp/rest/get_company?id=8591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpragmatike-security-operations-analyst-cyber-defense-operations-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpragmatike-security-operations-analyst-cyber-defense-operations-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpragmatike-security-operations-analyst-cyber-defense-operations-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pragmatike-security-operations-analyst-cyber-defense-operations-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpragmatike-security-operations-analyst-cyber-defense-operations-2"}]}