Descripción de la oferta
Our client is looking for a skilled Analista de SIEM y Detección de Amenazas to join their fully remote Security Operations Center (SOC). This role is crucial for monitoring, analyzing, and responding to security events and threats detected through our Security Information and Event Management (SIEM) system. You will play a key part in protecting the organization by identifying suspicious activities, tuning detection rules, and supporting incident response efforts. This is a remote-first position, ideal for an individual passionate about cybersecurity operations. About the Role Our client is looking for a skilled Analista de SIEM y Detección de Amenazas to join their fully remote Security Operations Center (SOC). This role is crucial for monitoring, analyzing, and responding to security events and threats detected through our Security Information and Event Management (SIEM) system. You will play a key part in protecting the organization by identifying suspicious activities, tuning detection rules, and supporting incident response efforts. This is a remote-first position, ideal for an individual passionate about cybersecurity operations. Key Responsibilities Monitor SIEM alerts and security logs for potential threats and anomalies. Analyze security events to identify potential security incidents and policy violations. Tune SIEM correlation rules and alerts to reduce false positives and improve detection accuracy. Develop and maintain SIEM use cases based on current threat intelligence and organizational risks. Assist in the investigation and analysis of security incidents, providing critical data from the SIEM. Collaborate with the incident response team to ensure effective containment and remediation. Document security findings, incident details, and response actions. Stay informed about new threats, vulnerabilities, and attack techniques relevant to SIEM detection. Contribute to the continuous improvement of SOC processes and procedures. Perform threat hunting activities using SIEM data and other security tools. Requirements Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience. Minimum of 3 years of experience working with SIEM platforms (e.g., Splunk, QRadar, LogRhythm, ELK Stack) in a security operations environment. Strong understanding of security principles, network protocols, and common attack vectors. Experience in analyzing security logs and identifying malicious activities. Familiarity with threat intelligence and its application in SIEM detection. Proficiency in writing SIEM queries and dashboards. Excellent analytical and problem-solving skills. Effective communication skills, with the ability to document technical findings clearly. Relevant certifications such as CompTIA Security+, GIAC GCIH, or SC-200 are a plus. Must be authorized to work remotely from Gijón, Asturias, ES or other locations within Spain. Benefits Our client offers a competitive salary, comprehensive health and wellness benefits, and excellent opportunities for professional development and career advancement. As a remote-first company, we prioritize work-life balance and offer significant flexibility. You will work with state-of-the-art security tools and have the chance to make a tangible impact on our organization's security posture. Join a collaborative team dedicated to protecting our digital assets. Our client is looking for a skilled SIEM Security Analyst to join their fully remote team. In this role, you will be responsible for managing, configuring, and optimizing our Security Information and Event Management (SIEM) system to detect and respond to security threats effectively. You will play a vital part in monitoring security alerts, investigating potential incidents, and ensuring the integrity of our security data. This position is ideal for an experienced security analyst who thrives in a remote-first environment and possesses a deep understanding of SIEM technologies and threat detection methodologies. We are building a robust security infrastructure, and your expertise will be crucial. About the Role Our client is looking for a skilled SIEM Security Analyst to join their fully remote team. In this role, you will be responsible for managing, configuring, and optimizing our Security Information and Event Management (SIEM) system to detect and respond to security threats effectively. You will play a vital part in monitoring security alerts, investigating potential incidents, and ensuring the integrity of our security data. This position is ideal for an experienced security analyst who thrives in a remote-first environment and possesses a deep understanding of SIEM technologies and threat detection methodologies. We are building a robust security infrastructure, and your expertise will be crucial. Key Responsibilities Monitor SIEM alerts and dashboards for security incidents and anomalies. Investigate security alerts, perform root cause analysis, and elevate as needed. Develop, tune, and maintain SIEM correlation rules, use cases, and dashboards. Onboard new log sources into the SIEM platform. Configure and manage SIEM system components and ensure data integrity. Assist in the development and refinement of security incident response playbooks. Analyze security logs and events to identify patterns and trends indicative of malicious activity. Collaborate with security operations center (SOC) analysts and other IT teams. Stay up-to-date with the latest cybersecurity threats and trends relevant to SIEM monitoring. Contribute to security awareness and training initiatives. Requirements Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent work experience. Minimum of 3 years of experience in a Security Operations Center (SOC) or similar role, with a focus on SIEM analysis. Hands-on experience with SIEM platforms such as Splunk, QRadar, LogRhythm, or similar. Strong understanding of security concepts, including threat detection, incident response, and network security. Proficiency in analyzing various log types (e.g., firewall, IDS/IPS, endpoint, application logs). Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus. Excellent analytical and problem-solving skills. Strong communication skills, with the ability to articulate technical findings effectively in a remote setting. Ability to work independently and manage workload efficiently in a remote environment. Relevant security certifications (e.g., CompTIA Security+, GIAC) are beneficial. Benefits Our client offers a competitive salary, excellent health benefits, and the opportunity for professional growth and development within a fully remote setting. You will have the chance to work with state-of-the-art SIEM technology and contribute to critical security initiatives. We foster a collaborative remote culture and provide the tools and support needed for success. Enjoy the flexibility and work-life balance that comes with a remote-first approach. #J-18808-Ljbffr
