Security Operations Analyst (SIEM Operations and Threat Detection)

📋 Description

• Contribute to the development, implementation, validation, tuning, and maintenance of security
• Support the operation, maintenance, optimization, and continuous improvement of security monitoring
• Participate in the onboarding, integration, testing, and validation of security data sources
• Contribute to security content management activities, including use case lifecycle management, rule
• Collaborate with cyber threat intelligence, incident response, and cybersecurity operations teams
• Under guidance, participate in cybersecurity architecture reviews of new or existing solutions and

🎯 Requirements

• +5 years of relevant experience in information technology field, including triage of alerts and
• Proven experience on administering a SIEM platform, preferably either Splunk or Microsoft Sentinel
• Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs) and being able to
• Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure, Defender for
• Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP).
• Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stack.

🎁 Benefits

• Remote Position
• Freelance, full-time contract.
• Training and career development.
• Possibility to be part of a multicultural team and work on international projects.