Senior Cybersecurity Analyst - Cyber Defense Operations

About the role

Talan is looking for a Senior Cybersecurity Analyst to join a global Cybersecurity Operations team that protects critical environments and supports international organizations against evolving cyber threats. You will be part of a 24x7 Security Operations Centre (SOC), working with cybersecurity specialists worldwide to monitor, investigate and respond to security incidents. This is a hands-on role contributing directly to threat detection, incident response and overall security.

Key responsibilities

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments
• Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems
• Investigate potential threats and identify root causes and remediation actions
• Work with Incident Response teams to contain and resolve threats
• Maintain security monitoring and detection tools and reduce false positives
• Prepare security reports, incident summaries and technical findings for clients
• Manage security tickets and document incidents
• Contribute to improving SOC processes, procedures, documentation and knowledge bases
• Work with clients to understand their environments and optimize security monitoring

Required profile

• 5+ years of experience in IT, Cybersecurity or Security Operations
• Hands-on SOC experience, including alert triage and incident investigation
• Strong knowledge of SIEM and EDR technologies
• Excellent spoken and written English

Required skills

• Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK
• Microsoft Defender for Endpoint, Microsoft 365, Azure Security and XDR
• Azure, AWS and/or GCP
• Networking and TCP/IP
• Log analysis on Windows and Linux
• Email security, network monitoring and incident response
• Managing and processing security tickets

Plus: Incident Response (Tier I/II) experience, AWS monitoring, scripting (Python, PowerShell, Bash, Ruby), certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE, and a global distributed SOC background.

What we offer

• Full-time permanent employment or contractor mode
• Remote location in Spain or another European country
• Professional growth and learning opportunities
• Private medical insurance, life insurance, lunch and transport card, and online language classes