Security Operations Analyst – Cyber Defense Operations

🔥 14 hours ago

🌐 Spain, Greece, +4 more countries – Remote

🇪🇸 Spain – Remote 🇬🇷 Greece – Remote 🇵🇱 Poland – Remote 🇵🇹 Portugal – Remote 🇮🇹 Italy – Remote 🇫🇷 France – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Pragmatike

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2022

💼 Consulting

📣 Marketing

🎯 Recruiter

Consulting • Marketing • Recruitment

Pragmatike is a remote IT recruitment and staffing company that sources, vets, and places international tech talent for businesses. They provide human-curated matching (not solely AI), technical assessments, and fast placements—claiming qualified specialists can be introduced within 48 hours—while handling onboarding, invoicing and international payroll. Pragmatike serves startups and enterprises with roles like developers, data engineers, mobile and game developers, product managers and specialists, operating across 60+ countries with a large vetted talent pool.

📋 Description

• Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms • Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS • Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation • Support incident response, remediation, and recovery activities • Work closely with Incident Response and other cybersecurity teams to manage security threats • Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data • Identify opportunities to improve detection quality and reduce false positives through tuning and optimization • Gather technical information from clients to improve security monitoring and detection • Prepare and present security reports, summaries, and technical findings • Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes • Review operational feedback and implement corrective actions to continuously improve service quality

🎯 Requirements

• 5+ years of relevant experience in IT/cybersecurity, including security alert triage and incident support • Hands-on experience working in a SOC environment • Strong experience with SIEM and EDR platforms • Advanced log analysis skills across Windows/Linux, databases, applications, and infrastructure • Strong knowledge of Microsoft Security technologies, including Microsoft Sentinel and Defender • Experience with cloud security across Azure, AWS, and/or GCP • Experience with SIEM platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK • Experience with at least one EDR solution such as Microsoft Defender for Endpoint or CrowdStrike • Knowledge of email security, network monitoring, and incident response • Strong knowledge of Linux, macOS, and Windows • Fluent English with excellent written and verbal communication skills • Experience working on an Incident Response team with Tier-1/Tier-2 incident triage • AWS security monitoring experience across IaaS, PaaS, or SaaS environments • Scripting experience with Python, PowerShell, Bash, Ruby, or similar • Certifications such as Microsoft SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE • Customer-facing cybersecurity experience

🏖️ Benefits

• Work inside a global 24/7 cybersecurity operation protecting international organizations • Gain exposure to large-scale cloud, SIEM, EDR, network, and endpoint security environments • Collaborate with cybersecurity specialists across multiple regions and disciplines • Work directly on real-world threat detection and incident response • Build experience across a broad enterprise security technology stack • Potential contract extension after 6 months