Security Operations Analyst (Cyber Defense Operations)

About the role

Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global 24/7 Security Operations Centre (SOC). The role focuses on monitoring, detecting, investigating and responding to cyber threats across enterprise, cloud, network and endpoint environments.

Key responsibilities

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft security tools and cloud platforms.
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls and NIDS/HIDS.
• Support incident response, remediation and recovery activities and work closely with Incident Response teams.
• Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.
• Prepare and present security reports, summaries and technical findings.

Required profile

• 5+ years of experience in IT/cybersecurity, including security alert triage and incident support.
• Hands‑on experience working in a SOC environment with strong SIEM and EDR expertise.
• Advanced log analysis skills across Windows, Linux, databases, applications and infrastructure.
• Fluent English with excellent written and verbal communication.

Required skills

• SIEM platforms (Splunk, QRadar, ArcSight, Microsoft Sentinel, ELK).
• EDR solutions (Microsoft Defender for Endpoint, CrowdStrike).
• Microsoft security technologies (Sentinel, Defender).
• Cloud security (Azure, AWS, GCP).
• Scripting languages (Python, PowerShell, Bash, Ruby).
• Operating systems (Linux, macOS, Windows) and network protocols (TCP/IP, syslog, firewall monitoring).

What we offer

• Work inside a global 24/7 cybersecurity operation protecting international organizations.
• Gain exposure to large‑scale cloud, SIEM, EDR, network and endpoint security environments.
• Collaborate with cybersecurity specialists across multiple regions and disciplines.
• Direct involvement in real‑world threat detection and incident response.