Security Monitoring Analyst

Project context

Project Details

• Location: Spain (Madrid or Barcelona) or Portugal (Lisbon)

• Work mode: Hybrid (1–2 days in office)

• Start date: ASAP

• Duration: 6 months

• Language(s): English

Project Summary

Security Monitoring Analyst role focused on SOC analytics improvement, SIEM content management, incident handling, and collaboration with information security teams to ensure effective intrusion detection and response.

Goals and deliverables

Main Responsibilities & Key Activities

• Build and continuously improve SOC analytics

• Ensure effective operation of SIEM content (filters, rules, expressions)

• Mentor and guide First Level Security Analysts

• Provide data analysis within SOC processes and to SOC stakeholders

• Perform and maintain SOC analytical processes and tasks

• Collaborate with Information Security teams for intrusion detection and incident response

• Handle high severity incidents autonomously during on-call rotations

• Communicate and report to SOC stakeholders and customers

• Maintain and improve technical capabilities through certifications and development activities

Experience Required

Must-Have Requirements

• 3–5 years in security operations or incident response services

• 3 years in information security domain

• 3 years in security analysis and SIEM content development

• 3 years experience in a global organization

• Expertise in security monitoring and analysis tools (Sentinel, Splunk, QRadar, ArcSight, Google SecOps)

• Hands-on expertise with network security, vulnerability management, and incident response

• Strong understanding of security threats, attack scenarios, analysis and intrusion detection

Nice-to-Have Requirements

• Overview of network technologies, Windows and Unix administration

• Overview of security devices such as firewalls, intrusion detection systems, AV and End Point security, Web Application Firewalls, antispam systems, event correlation systems

• Overview of cloud security concepts and tools

• Certifications: SEC555 (GCDA), FOR572 (GNFA), FOR508 (GCFA), CISSP