{"id":1253796,"url":"https://alion.io/job/pragmatike-security-operations-analyst-siem-threat-detection","title":"Security Operations Analyst (SIEM & Threat Detection)","company":{"id":8591,"name":"Pragmatike","domain":"pragmatike.com","url":"https://alion.io/company/pragmatike","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lecce, Italy","Valencia, Spain","Elche, Spain","Paris, France"],"countries":["IT","ES","FR"],"hiring_countries":["ES"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":171000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Bash","optional":true},{"name":"GDPR","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Ruby","optional":true}],"status":"live","first_seen_at":"2026-09-25T18:05:36Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-10-18T18:04:05Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Location: Valencia, Spain, Hybrid OR Remote across EMEA\nEmployment: Full-Time Contract\nDuration: 6 months, with potential extension\nLanguage: Fluent English required\nIndustry: Cybersecurity / SIEM / Cloud Security\nAbout the Opportunity\nPragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst specializing in SIEM and Threat Detection.\nYou’ll join a global Cybersecurity Operations team focused on building, operating, and continuously improving the security monitoring capabilities protecting international organizations and their technology environments.\nUnlike a traditional SOC monitoring role, this position has a strong focus on SIEM administration, detection engineering, security content, data-source onboarding, use-case lifecycle management, and detection optimization.\nYou’ll work closely with Threat Intelligence, Incident Response, and Cybersecurity Operations teams to turn security requirements and emerging threats into effective, measurable detection capabilities.\nWhat You’ll Do\nDevelop, implement, validate, tune, and maintain security monitoring and detection capabilities.\n\nAdminister and optimize SIEM platforms across multiple customer environments.\n\nManage security detection rules and use cases throughout their lifecycle.\n\nOnboard, integrate, test, and validate new security data sources and telemetry feeds.\n\nReview and improve detection logic, security content, and monitoring configurations.\n\nCollaborate with Threat Intelligence and Incident Response teams to translate threats into actionable detection capabilities.\n\nSupport cybersecurity architecture reviews and provide recommendations to improve security monitoring.\n\nBuild and maintain security metrics, dashboards, KPIs, and service-performance reports.\n\nEvaluate detection effectiveness and identify opportunities to reduce false positives.\n\nContribute to quality assurance, process reviews, control validation, and corrective actions.\n\nMaintain SOC procedures, standards, documentation, knowledge bases, and operational guidance.\n\nPrepare technical reports, findings, and recommendations for internal and external stakeholders.\n\nWhat We’re Looking For\n5+ years of relevant IT/cybersecurity experience.\n\nProven hands-on experience administering a SIEM platform, ideally Splunk or Microsoft Sentinel.\n\nStrong experience with SIEM/EDR environments and technical security analysis.\n\nDeep knowledge of Microsoft Security technologies.\n\nStrong cloud security knowledge across Azure, AWS, and/or GCP.\n\nExperience with platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK.\n\nExperience with at least one EDR platform such as Microsoft Defender for Endpoint or CrowdStrike.\n\nKnowledge of email security, network monitoring, and incident response.\n\nStrong Linux, macOS, and Windows knowledge.\n\nFluent English with excellent written and verbal communication skills.\n\nNice to Have\nExperience designing SIEM architecture from initial design through implementation.\n\nExperience building data-ingestion pipelines for diverse cloud and on-premise log sources.\n\nAWS security monitoring experience.\n\nScripting experience with Python, PowerShell, Bash, Ruby, or similar.\n\nSecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.\n\nExperience working across multiple customer environments.\n\nWhy Join\nWork beyond traditional SOC monitoring and contribute to the engineering and optimization of security detection capabilities.\n\nGain exposure to large-scale SIEM, EDR, cloud, and threat-detection environments.\n\nWork directly with Threat Intelligence, Incident Response, and Cybersecurity Operations teams.\n\nHelp shape detection use cases, monitoring architecture, and operational processes.\n\nWork on cybersecurity services supporting multiple international organizations.\n\nPragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation.\nIn accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration.","description_format":"text","description_chars":4314,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-25T18:43:10Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.541,"p_room":0.9,"age_days":21,"expected_fill_days":41,"reasons":["conf:3","agency","velocity","win:mid"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/pragmatike-security-operations-analyst-siem-threat-detection","json_url":"https://alion.io/job/pragmatike-security-operations-analyst-siem-threat-detection.json","meta":{"generated_at":"2026-10-18T18:05:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22928,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8591},"rest":"https://alion.io/mcp/rest/get_company?id=8591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpragmatike-security-operations-analyst-siem-threat-detection"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpragmatike-security-operations-analyst-siem-threat-detection"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpragmatike-security-operations-analyst-siem-threat-detection"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pragmatike-security-operations-analyst-siem-threat-detection\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpragmatike-security-operations-analyst-siem-threat-detection"}]}