The English-language job board for Spain

SIEM Analyst

Remote, Madrid·Added 10 days ago (last checked 26 Oct)

Logicalis Spain

58 open roles

Apply

Our summary

Hours: Jornada intensiva on Fridays and in summer
Work mode: Remote (Madrid)
Benefits: Private health insurance, flexible pay plan, meal vouchers, gym access

Visa options

The ad doesn’t mention sponsorship
Not a refusal, but not a yes. Worth asking in your first message.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Pay & benefits

What you'll get

Certifications related to SOC, SIEM, Blue Team, or Threat Hunting.

What do we offer you at Logicalis Spain?
- 100% remote work modality.
- Office hours with intensive shifts every Friday of the year, and during the months of July and August.
- Stable job position. Long-term continuous project.
- Possibility of joining flexible compensation plans: Wellbeing, Wellhub, Private Medical Insurance, Restaurant Card.
- Continuous training and certification on the job, both at a technological level and regarding work methodologies in the IT sector.

The role

At Logicalis Spain, we are looking to hire a SIEM Security Analyst with experience in monitoring, security event analysis, and threat detection, with specific knowledge in Threat Intelligence, Threat Hunting, and Pentera.

The person will integrate into a cybersecurity service oriented towards the detection, analysis, and continuous improvement of the client's security capabilities.

What you'll do

Monitoring and analysis of security events and alerts through SIEM platforms.
Investigation and analysis of security incidents.
Creation, adjustment, and improvement of correlation rules and use cases.
Analysis of false positives and optimization of detection capabilities.
Carrying out Threat Hunting activities to identify anomalous behaviors or threats not detected by traditional mechanisms.
Use and analysis of Threat Intelligence information, including IoCs, TTPs, and threat campaigns.
Enrichment of alerts and investigations with threat intelligence sources.
Execution and analysis of exercises using Pentera, identifying possible attack vectors and validating the effectiveness of security controls.
Analysis of results obtained through Pentera and coordination with technical teams for the remediation of identified vulnerabilities or weaknesses.
Preparation of technical reports and follow-up on improvement actions.
Collaboration with SOC, infrastructure, systems, and security teams.

Requirements:
Previous experience working with SIEM platforms.
Experience in security alert and incident analysis.
Experience in Threat Intelligence.
Experience performing Threat Hunting activities.
Experience or practical knowledge in Pentera.
Knowledge of IoCs, TTPs, and frameworks such as MITRE ATT&CK.
Knowledge of networks, Windows/Linux systems, and security technologies.
Ability to analyze events from different security sources.

Valuable knowledge:
Experience with SIEM such as Microsoft Sentinel, Splunk, QRadar, Google SecOps, XSIAM, or similar.
Experience with EDR/XDR. Knowledge of Threat Intelligence tools.
Knowledge of scripting (Python, PowerShell, or similar).
Experience in automation and SOAR.
Knowledge of vulnerability management and attack techniques.