search Browse Jobs
Security Operations Analyst (SIEM Operations and Threat Detection)Talan · Vigo, Galicia, Spain
Talan logo

Talan

company page ↗

Security Operations Analyst (SIEM Operations and Threat Detection)

🗓️ Posted 2026-09-25 Vigo, Galicia, Spain Contract Hybrid ICT
💰 Salary Not shared 📊 Market 2,200 EUR–3,200 EUR/mo

About the Company

Company Description Talan - Positive Innovation Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of 850M, we are committed to delivering impactful, future-ready solutions. Talan at a Glance Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we've built a strong presence in the IT and consulting landscape, and we're on track to reach 1 billion in revenue this year. Our Core Areas of Expertise - Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI. - Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency. - Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies. We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, a

About the Role

erations capabilities through activities such as security content management, quality assurance and validation of detection mechanisms, detection use case lifecycle management, onboarding and integration of new security data sources, reporting, and process optimization. This is an excellent opportunity for professionals interested in working within a large-scale international cybersecurity environment, where they will play a key role in the continuous improvement of security monitoring and threat detection services across multiple customer landscapes. The position combines elements of Security Operations, Threat Detection Engineering, SIEM optimization, cyber risk management, and operational excellence, offering exposure to a wide variety of cybersecurity technologies and challenges. Main Responsibilities: - Contribute to the development, implementation, validation, tuning, and maintenance of security monitoring, analytics, and detection capabilities across SIEM, EDR, cloud, and other cybersecurity platforms. - Support the operation, maintenance, optimization, and continuous improvement of security monitoring and threat detection services. - Participate in the onboarding, integration, testing, and validation of security data sources, telemetry feeds, and monitoring capabilities. - Contribute to security content management activities, including use case lifecycle management, rule reviews, testing, tuning, and content quality assurance. - Collaborate with cyber threa

Requirements

  • ● +5 years of relevant experience in information technology field, including triage of alerts and supporting security incidents
  • ● Proven experience on administering a SIEM platform, preferably either Splunk or Microsoft Sentinel SIEM
  • ● Proven experience with the usual toolbox available in a SOC (e.g., SIEMs, EDRs) and being able to autonomously perform technical analysis of security threats and collaborate with Incident Response team
  • ● Deep knowledge of Microsoft Security Tools (e.g. M365, Cloud App Security, Azure,Defender for Endpoints, Azure Security, Azure Sentinel and XDR)
  • ● Deep Knowledge of Cloud technologies (e.g. Azure, AWS and GCP)
  • ● Deep knowledge of SIEM tools like Splunk, QRadar, ArcSight, MS Sentinel, ELK Stac
  • ● Knowledge of at least one EDR solution (MS Defender for Endpoint, CrowdStrike)
  • ● Knowledge of email security, network monitoring, and incident response
  • ● Knowledge of Linux/Mac/Windows
  • ● C1 English proficiency
  • ● Nice to have:
  • ● Proven knowledge of monitoring AWS environment (Iaas, Saas, Paas)
  • ● Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.)
  • ● MCSE, CCNA, Microsoft Azure (e.g., SC-200), GCIH, CEH, GCFA or any GIAC/similar certification
  • ● Required Soft Skills:
  • ● Excellent communication skills
  • ● Customer-facing experience and oral communication skills
  • ● Ability to write documentation & reports
  • ● Creativity/ ability to find innovative solutions
  • ● Willingness to learn on the job