Security Operation Analyst (Cyber Defense Operation)

Pragmatike

Mexico

Remote

Who this role is best for

A natural match if you have hands-on SOC experience and strong technical skills in SIEM and EDR platforms.

Best fit for

Candidates with hands-on SOC experience and a background in enterprise security monitoring
— “working in a SOC environment”
Professionals who have worked with Microsoft security tools and cloud platforms
— “Strong knowledge of Microsoft Security technologies, including Microsoft Sentinel and Defender”
Individuals with a strong grasp of log analysis across Windows, Linux, and network infrastructure
— “Advanced log analysis skills across Windows/Linux, databases, applications, and infrastructure”

Things to consider

Fluent English is essential for communication in a globally distributed team
— “Fluent English required”
The role demands a long-term commitment, not a short-term contract
— “Duration: Long-Term”

How to stand out

Highlight experience in incident response and remediation with specific examples
— “Support incident response, remediation, and recovery activities”
Emphasize your ability to reduce false positives through tuning and optimization
— “Identify opportunities to improve detection quality and reduce false positives through tuning and optimization”
Showcase your skills in analyzing network and security events using TCP/IP and syslog
— “Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data”
Demonstrate your ability to gather and interpret technical information from clients
— “Gather technical information from clients to improve security monitoring and detection”
Demonstrate your ability to contribute to SOC procedures and documentation
— “Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes”

Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

monitoring and investigating security alerts
supporting incident response and recovery activities
improving detection quality and reducing false positives

Typical background

5+ years of relevant experience in IT/cybersecurityhands-on experience in a SOC environment

Skills & requirements

Required

Security Alert TriageIncident ResponseLog AnalysisSIEM And EDR PlatformsCloud SecurityNetwork MonitoringLinux, Macos, And Windows

Preferred

Scripting With Python, Powershell, Bash, RubyCertifications Such As Microsoft Sc-200, Gcih, CEH, Gcfa, Giac, Ccna, Or MCSE

Stack & domain

SIEMEDRMicrosoft SecurityCloud SecurityNetwork MonitoringIncident ResponseLog AnalysisScriptingPythonPowershellBashRubyCommunicationMicrosoft Sc-200GCIHCEHGCFAGIACCCNAMCSECybersecurityCloudEnterprise Security

About the role

Original posting from Pragmatike via Ashby

Location: Remote across LATAM
Employment: Full-Time Contract
Duration: Long-Term
Language: Fluent English required
Industry: Cybersecurity / Cloud / Enterprise Security
ABOUT THE OPPORTUNITY
Pragmatike is recruiting on behalf of a major international organization for a Security Operations Analyst to join a global Cybersecurity Operations team.
You’ll be part of a 24/7 Security Operations Centre (SOC) responsible for monitoring, detecting, investigating, and responding to cyber threats across enterprise, cloud, network, and endpoint environments.
This is a hands-on security role focused on alert triage, threat investigation, log analysis, incident response, and security monitoring, working alongside cybersecurity specialists distributed across multiple regions.
WHAT YOU’LL DO
Monitor, triage, and investigate security alerts across SIEM, EDR, Microsoft security tools, and cloud platforms.
Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls, and NIDS/HIDS.
Investigate suspicious activity, identify root causes, and determine appropriate remediation or escalation.
Support incident response, remediation, and recovery activities.
Work closely with Incident Response and other cybersecurity teams to manage security threats.
Analyze network and security events using TCP/IP, syslog, firewall, and network monitoring data.
Identify opportunities to improve detection quality and reduce false positives through tuning and optimization.
Gather technical information from clients to improve security monitoring and detection.
Prepare and present security reports, summaries, and technical findings.
Contribute to SOC procedures, documentation, knowledge bases, and quality-control processes.
Review operational feedback and implement corrective actions to continuously improve service quality.
WHAT WE’RE LOOKING FOR
5+ years of relevant experience in IT/cybersecurity, including security alert triage and incident support.
Hands-on experience working in a SOC environment.
Strong experience with SIEM and EDR platforms.
Advanced log analysis skills across Windows/Linux, databases, applications, and infrastructure.
Strong knowledge of Microsoft Security technologies, including Microsoft Sentinel and Defender.
Experience with cloud security across Azure, AWS, and/or GCP.
Experience with SIEM platforms such as Splunk, QRadar, ArcSight, Microsoft Sentinel, or ELK.
Experience with at least one EDR solution such as Microsoft Defender for Endpoint or CrowdStrike.
Knowledge of email security, network monitoring, and incident response.
Strong knowledge of Linux, macOS, and Windows.
Fluent English with excellent written and verbal communication skills.
NICE TO HAVE
Experience working on an Incident Response team with Tier-1/Tier-2 incident triage.
AWS security monitoring experience across IaaS, PaaS, or SaaS environments.
Scripting experience with Python, PowerShell, Bash, Ruby, or similar.
Certifications such as Microsoft SC-200, GCIH, CEH, GCFA, GIAC, CCNA, or MCSE.
Customer-facing cybersecurity experience.
WHY JOIN
Work inside a global 24/7 cybersecurity operation protecting international organizations.
Gain exposure to large-scale cloud, SIEM, EDR, network, and endpoint security environments.
Collaborate with cybersecurity specialists across multiple regions and disciplines.
Work directly on real-world threat detection and incident response.
Build experience across a broad enterprise security technology stack.
Pragmatike is committed to a fair, transparent, and inclusive recruitment process. We do not discriminate based on age, disability, gender, gender identity or expression, marital or civil partner status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation.
In accordance with GDPR, your personal data will be processed lawfully, fairly, and securely and used solely for recruitment purposes, including sharing it with our client(s) for employment consideration.

Source: Pragmatike careers (Ashby)