Analista SIEM

This is a fully remote position, open to applicants in Spain.

📋 Description

• Monitoring and analysis of security events and alerts through SIEM platforms

• Investigation and analysis of security incidents

• Creation, adjustment, and improvement of correlation rules and use cases

• Analysis of false positives and optimization of detection capabilities

• Conducting Threat Hunting activities to identify anomalous behaviors or undetected threats

• Utilization and analysis of Threat Intelligence information, including IoCs, TTPs, and threat campaigns

• Enrichment of alerts and investigations with threat intelligence sources

• Execution and analysis of exercises using Pentera, identifying attack vectors and validating the effectiveness of security controls

• Analysis of Pentera results and coordination with technical teams to remediate vulnerabilities or weaknesses

• Preparation of technical reports and tracking of improvement actions

• Collaboration with SOC, infrastructure, systems, and security teams

⛳️ Requirements

• Previous experience working with SIEM platforms

• Experience in analyzing alerts and security incidents

• Experience in Threat Intelligence

• Experience conducting Threat Hunting activities

• Experience or practical knowledge in Pentera

• Knowledge of IoCs, TTPs, and frameworks such as MITRE ATT&CK

• Understanding of networks, Windows/Linux systems, and security technologies

• Ability to analyze events from various security sources

• Familiarity with Microsoft Sentinel, Splunk, QRadar, Google SecOps, XSIAM, or similar tools is valued

• Experience with EDR/XDR is appreciated

• Knowledge of Threat Intelligence tools is valued

• Familiarity with scripting (Python, PowerShell, or similar) is appreciated

• Experience in automation and SOAR is valued

• Knowledge of vulnerability management and attack techniques is appreciated

• Certifications related to SOC, SIEM, Blue Team, or Threat Hunting are valued

🏝️ Benefits

• 100% remote work modality

• Office hours with intensive workdays every Friday of the year, and in July and August

• Stable work position

• Ongoing long-term project

• Possibility to participate in flexible compensation plans: Wellbeing, Wellhub, Private Medical Insurance, Restaurant Card

• Continuous training and certification in the workplace, both in technology and working methodologies in the IT sector