Security Operations Analyst (Cyber Defense Operations)
Pragmatike
- Bari, Italy
- On-site
- Mid Level
- Posted
Responsibilities
- to join a global Cybersecurity Operations team.
- 24/7 Security Operations Centre (SOC)
- responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.
- This is a hands-on security role focused on
- alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.
- Monitor, triage, and investigate security alerts across
- SIEM, EDR, Microsoft security tools, and cloud platforms
Analyze host and network logs from
- Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS
- Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.
- Support
incident response, remediation, and recovery
- activities.
- Work closely with Incident Response and other cybersecurity teams to manage security threats.
- Analyze network and security events using
TCP/IP, syslog, firewall, and network monitoring data
- Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.
- Gather technical information from clients to improve security monitoring and detection.
- Prepare and present security reports, summaries, and technical findings.
- Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes.
- Review operational feedback and implement corrective actions to continuously improve service quality.
Requirements
- Fluent English required
- Advanced log analysis skills across Windows/Linux, databases, applications, and infrastructure.
- Strong knowledge of
- Strong knowledge of
- Linux, macOS, and Windows
- Fluent English with excellent written and verbal communication skills.
Preferred
- Experience working on an Incident Response team with
- Tier-1/Tier-2 incident triage
- AWS security monitoring experience across IaaS, PaaS, or SaaS environments.
- Scripting experience with
- Python, PowerShell, Bash, Ruby, or similar.
Certifications such as
- Microsoft SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE
- Customer-facing cybersecurity experience.
Location
Valencia, Spain, Hybrid OR Remote across EMEA
Employment
Full-Time Contract
Duration
6 months, with potential extension
Industry
Cybersecurity / Cloud / Enterprise Security
About the Opportunity
- Pragmatike is recruiting on behalf of a major international organization for a
- Security Operations Analyst
What We’re Looking For
- 5+ years of relevant experience in IT/cybersecurity, including security alert triage and incident support.
- Hands-on experience working in a
- SOC environment
- Strong experience with
SIEM and EDR platforms
- Microsoft Security technologies, including Microsoft Sentinel and Defender.
- Experience with cloud security across
- Azure, AWS, and/or GCP
- Experience with SIEM platforms such as
Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK
Experience with at least one EDR solution such as
Microsoft Defender for Endpoint or CrowdStrike
Knowledge of email security, network monitoring, and incident response.
Why Join
Work inside a global 24/7 cybersecurity operation protecting international organizations.
Gain exposure to large-scale cloud, SIEM, EDR, network, and endpoint security environments
Collaborate with cybersecurity specialists across multiple regions and disciplines.
Work directly on real-world threat detection and incident response.
Build experience across a broad enterprise security technology stack.
Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation.
In accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration.
jobapplier