SIEM Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇦🇷 Argentina – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧐 Analyst

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Paramo Technologies

WebsiteLinkedInAll Job Openings

201 - 500 employees

🛍️ eCommerce

🎮 Gaming

☁️ SaaS

eCommerce • Gaming • SaaS

Paramo Technologies is a full-service design and development company focused on creating innovative digital entertainment and e-commerce products. As a global team of tech professionals, Paramo delivers high-quality application and web experiences for a worldwide network of players, striving to be the best in agile software development to ensure outstanding user and player experiences. With over 20 years of experience and a diverse, international workforce spanning more than 15 countries, Paramo places a strong emphasis on quality, craftsmanship, and clear communication. The company values recruiting and supporting great talent to foster a brilliant team capable of delivering the highest quality products.

📋 Description

• Collect, normalize, analyze, and exploit security logs from multiple sources across the organization • Design, implement, and maintain log collection pipelines from security, infrastructure, cloud, and application systems • Ensure logs are ingested, parsed, normalized, and retained correctly across SIEM platforms such as FortiAnalyzer, Splunk, and CrowdStrike • Maintain data quality and consistency across log sources • Design, build, and maintain dashboards and visualizations for security posture, threats, and operational metrics • Create, tune, and maintain correlation rules and alerts based on attack patterns, indicators of compromise, behavioral anomalies, and custom detection use cases • Analyze logs to identify suspicious, anomalous, or unusual behavior • Proactively hunt for threats through advanced log searches and pattern analysis • Support incident response and forensic investigations by searching historical logs, reconstructing attack timelines, and identifying entry points, lateral movement, and attacker activity • Collaborate with SOC Analysts, Dev Security, IAM, Threat Hunting, and other security roles during incident investigation and response • Validate alerts and detections to reduce false positives and improve detection quality • Document and track detections, investigations, and findings through Jira tickets • Create and update procedures for log management, detection, and investigation • Create operational, technical, and management reports based on SIEM data • Engage in ongoing training and professional development • Share knowledge and expertise with the team • Adhere to organizational policies and keep work organized and traceable through Jira

🎯 Requirements

• Studies in computer science, telecommunications, cybersecurity, or other related academic fields • At least 3 years of work experience in SIEM operations, log analysis, or security monitoring roles • Hands-on experience collecting and managing logs from multiple sources, including endpoints, network devices, servers, cloud services, applications, and authentication systems • At least 2 years of experience with Splunk, including operating and configuring rules and settings • At least 2 years of experience working with CrowdStrike • Experience with SIEM and log platforms such as FortiAnalyzer, New Relic, ManageEngine AD Audit, Axonius, or similar • Experience creating dashboards, visualizations, and reports based on log data • Experience defining and tuning alerts and correlation rules • Knowledge of SIEM scripting or query languages such as SPL, KQL, and SQL-like queries • Knowledge of YARA rules and regular expressions (regex) • Familiarity with security tools generating logs, including firewalls, EDR, IAM, cloud platforms, and application security tools • Strong analytical mindset for identifying patterns and anomalies in large datasets • Experience supporting incident response and forensic investigations through log analysis • Ability to work independently and as part of the Information Security Team under minimal supervision • Eager to learn and continuously improve detection capabilities • Strong documentation and reporting skills • Solid foundations in networking, operating systems, authentication flows, and cybersecurity • Ability to understand how logs reflect system and user behavior across different platforms • Any cybersecurity certification is nice to have • Experience with log normalization standards and detection methodologies is nice to have • Familiarity with MITRE ATT&CK and threat detection frameworks is nice to have • Experience with threat hunting activities is nice to have • Familiarity with forensic analysis concepts and incident response workflow is nice to have • Must reside in the Americas, preferably South and Central America

🏖️ Benefits

• 22 days of annual leave • 10 days of national holidays • Health Insurance options • Access to e-learning platforms • Possibility of on-site English classes in some countries • Professional development opportunities • Remote or on-site work options