Security Operations Analyst – Cyber Defense

🔥 15 hours ago

🌐 India, Sri Lanka, +3 more countries – Remote

🇮🇳 India – Remote 🇱🇰 Sri Lanka – Remote 🇻🇳 Vietnam – Remote 🇮🇩 Indonesia – Remote 🇹🇭 Thailand – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pragmatike

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2022

💼 Consulting

📣 Marketing

🎯 Recruiter

Consulting • Marketing • Recruitment

Pragmatike is a remote IT recruitment and staffing company that sources, vets, and places international tech talent for businesses. They provide human-curated matching (not solely AI), technical assessments, and fast placements—claiming qualified specialists can be introduced within 48 hours—while handling onboarding, invoicing and international payroll. Pragmatike serves startups and enterprises with roles like developers, data engineers, mobile and game developers, product managers and specialists, operating across 60+ countries with a large vetted talent pool.

📋 Description

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS • Investigate suspicious activity and identify potential root causes • Support incident response, remediation, and recovery activities • Determine appropriate escalation paths and coordinate with relevant cybersecurity teams • Work with Incident Response specialists to investigate and manage threats • Identify opportunities to improve detection quality and reduce false positives • Support security monitoring optimization and whitelist tuning • Prepare technical reports, summaries, and security findings • Maintain SOC documentation, procedures, and knowledge-base content • Contribute to process improvements and operational quality initiatives

🎯 Requirements

• 5+ years of relevant IT/cybersecurity experience • Hands-on experience with security alert triage and incident investigation • Experience working with SIEM and EDR platforms • Strong log analysis skills across Windows/Linux and enterprise infrastructure • Deep knowledge of Microsoft Security technologies • Experience with Azure, AWS, and/or GCP • Experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight, or ELK • Experience with at least one EDR solution such as Microsoft Defender for Endpoint or CrowdStrike • Knowledge of email security, network monitoring, and incident response • Strong Linux, macOS, and Windows knowledge • Fluent English with excellent written and verbal communication skills • Tier-1/Tier-2 Incident Response experience • AWS security monitoring experience across IaaS, PaaS, or SaaS environments • Scripting experience with Python, PowerShell, Bash, Ruby, or similar • Certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE • Experience working in a global SOC or distributed cybersecurity team

🏖️ Benefits

• Remote-first work arrangement • Full-time contract for 6 months, with potential extension • Hands-on exposure to real-world threat detection and incident response • Opportunity to work with a global 24/7 Security Operations Centre • Collaboration with security specialists across different regions and technical disciplines • Exposure to SIEM, EDR, cloud, network, and endpoint security • Inclusive and transparent recruitment process