Security Operations Analyst – Cyber Defense (IST Timezone)

About the role

Pragmatike is recruiting for a major international organization to join a global 24/7 Cybersecurity Operations Centre. The Security Operations Analyst will monitor, detect, investigate and respond to cyber threats across cloud, endpoint, network and enterprise environments.

Key responsibilities

• Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft security tools and cloud platforms.
• Analyze host and network logs from Windows, Linux, databases, applications, web servers, firewalls and NIDS/HIDS.
• Support incident response, remediation and recovery activities and coordinate escalation with relevant teams.
• Identify opportunities to improve detection quality, reduce false positives and tune whitelists.
• Prepare technical reports, maintain SOC documentation and contribute to process improvements.

Required profile

• 5+ years of IT/cybersecurity experience with hands‑on security alert triage and incident investigation.
• Strong log analysis skills across Windows, Linux and enterprise infrastructure.
• Fluent English with excellent written and verbal communication.

Required skills

• Experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight, ELK).
• Experience with EDR solutions (Microsoft Defender for Endpoint, CrowdStrike).
• Knowledge of Microsoft security technologies and cloud services (Azure, AWS, GCP).
• Familiarity with email security, network monitoring and incident response.
• Proficiency with scripting languages such as Python, PowerShell, Bash or Ruby.

What we offer

• Join a global 24/7 SOC protecting international organisations.
• Work remotely while collaborating with security specialists across regions.
• Hands‑on exposure to a broad cybersecurity stack spanning SIEM, EDR, cloud, network and endpoint security.