高级网络安全分析师 - （网络安全运营）
Senior Cybersecurity Analyst - (Cyber Defense Operations)
公司简介
Talan – 正向创新
Talan 是一家国际咨询集团，专注于通过技术实现创新和业务转型。我们拥有 7,200 多名顾问，在 21 个国家开展业务，年营收达 8.5 亿欧元，致力于提供有影响力、面向未来的解决方案。
Talan 快速了解
总部位于巴黎，全球运营，Talan 将技术、创新与赋能相结合，为客户提供可衡量的成果。在过去 22 年里，我们在 IT 和咨询领域建立了强大的影响力，今年有望实现 10 亿欧元的营收。
我们的核心专长
· 数据与技术：我们设计并实施大规模的端到端架构和数据解决方案，包括数据集成、数据科学、可视化、大数据、人工智能和生成式人工智能。
· 云与应用服务：我们整合 SAP、Salesforce、Oracle、Microsoft、AWS 和 IBM Maximo 等领先平台，帮助客户迁移到云端并提高运营效率。
· 管理与创新咨询：我们通过项目与变更管理的最佳实践（PM、PMO、敏捷、Scrum、产品负责人）引领业务和数字化转型计划，并支持供应链、网络安全和 ESG/低碳战略等领域。
我们与多个行业的全球主要客户合作，包括交通运输与物流、金融服务、能源与公用事业、零售以及媒体与电信。
我们正在寻找一名高级网络安全专家加入一个全球网络安全运营团队，负责保护关键环境，并支持国际组织应对不断演变的网络威胁。
你将加入一个 24x7 的安全运营中心（SOC），与全球的网络安全专家一起监控、调查和响应安全事件。这是一个需要动手操作的角色，你的技术专长将直接有助于提升威胁检测、事件响应和整体安全性。
🚀 你将做什么？
· 在 SIEM、EDR、Microsoft 安全和云环境中监控、分类和调查安全警报。
· 调查潜在的网络威胁和安全事件，识别根本原因并采取适当的修复措施。
· 分析来自 Windows、Linux、数据库、应用程序、Web 服务器、防火墙和网络安防系统的日志。
· 与事件响应团队和网络安全专家密切合作，以遏制和解决威胁。
查看英文原文
Company Description
Talan – Positive Innovation
Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.
Talan at a Glance
Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year.
Our Core Areas of Expertise
· Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
· Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
· Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.
We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.
We’re looking for a Senior Cybersecurity to join a global Cybersecurity Operations team responsible for protecting critical environments and supporting international organizations against evolving cyber threats.
You’ll be part of a 24x7 Security Operations Centre (SOC), working with cybersecurity specialists across the world to monitor, investigate and respond to security incidents. This is a hands-on role where your technical expertise will directly contribute to improving threat detection, incident response and overall security.
🚀 What will you do?
· Monitor, triage and investigate security alerts across SIEM, EDR, Microsoft Security and cloud environments.
· Investigate potential cyber threats and security incidents, identifying root causes and appropriate remediation actions.
· Analyze logs from Windows, Linux, databases, applications, web servers, firewalls and network security systems.
· Work closely with Incident Response teams and cybersecurity specialists to contain and resolve threats.
· Use and maintain security monitoring and detection tools, helping improve detection quality and reduce false positives.
· Prepare clear security reports, incident summaries and technical findings for clients.
· Manage security-related tickets and ensure incidents are properly documented.
· Contribute to improving SOC processes, procedures, documentation and knowledge bases.
· Work directly with clients to understand their environments and optimize security monitoring.
· Stay up to date with emerging threats, technologies and cybersecurity best practices.
🛠️ What are we looking for?
We’re looking for someone who combines strong technical skills with a proactive and collaborative mindset.
You should have:
· 5+ years of experience in IT, Cybersecurity or Security Operations.
· Hands-on experience working in a SOC environment, including security alert triage and incident investigation.
· Strong knowledge of SIEM and EDR technologies.
· Experience with platforms such as Microsoft Sentinel, Splunk, QRadar, ArcSight or ELK.
· Experience with Microsoft Security technologies, including Defender for Endpoint, Microsoft 365, Sentinel, Azure Security and XDR.
· Strong understanding of Azure, AWS and/or GCP.
· Experience with at least one EDR solution, such as Microsoft Defender for Endpoint or CrowdStrike.
· Strong knowledge of networking and TCP/IP.
· Excellent experience analyzing security logs across Windows and Linux environments.
· Knowledge of email security, network monitoring and incident response.
· Experience managing and processing security tickets.
· Excellent spoken and written English.
⭐ It would be a plus if you have:
· Experience working in an Incident Response team, particularly Tier I/II.
· Experience monitoring AWS environments, including IaaS, PaaS and SaaS.
· Scripting experience with Python, PowerShell, Bash, Ruby or similar.
· Cybersecurity certifications such as SC-200, GCIH, CEH, GCFA, GIAC, CCNA or MCSE.
· Experience working in a global, distributed SOC.
What do we offer you?
· Full-time and permanent employment contract or contractor mode
· Remote location in Spain or any other European country.
· Professional growth possibilities & learning opportunities
· Possibility to join a multicultural team & work in the international environment
· Variety of benefits to support your physical, emotional and financial wellbeing: private medical insurance, life insurance, lunch and transport card as part of the flexible remuneration pack, and online language classes
· Smart Office Pack
If you have read this far and you are looking forward to joining this challenge, do not hesitate to apply... we would be delighted to meet you!
Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).