Jobs in Portugal, in English.

PortugalJobs.io

Analyst – Security Operations Center (M/F) - LISBON

On-site in Portugal·Added 3 days ago (last checked 9 Nov)

Infraestruturas de Portugal

128 open roles

Apply

Our summary

Work mode
On-site, Portugal

Skills

This job advert was originally written in Portuguese.

The role

What you'll do

  • Proactively monitor security events, intrusions, attack attempts, and anomalous behavior patterns, using the platforms and information sources available in the Security Operations Center (SOC);
  • Perform the triage, investigation, and enrichment of security alerts, validating events, identifying false positives, and collecting relevant technical evidence;
  • Respond to security incidents, executing analysis, mitigation, and containment actions, in coordination with the competent technical and cybersecurity teams;
  • Operationally coordinate the operators (SOC), ensuring the distribution, monitoring, and prioritization of monitoring, triage, investigation, initial response, and escalation activities for cybersecurity events and incidents;
  • Support the analysis of vulnerabilities, exposure, and indicators of compromise, contributing to the identification of corrective and preventive measures;
  • Create, maintain, review, and improve playbooks, operational procedures, and response instructions for cybersecurity events and incidents;
  • Support the fine-tuning of detection rules, correlation, and use cases in SIEM and SOAR platforms, with a view to reducing false positives and strengthening detection capability;
  • Prepare technical reports, incident logs, evidence, recommendations, and contributions for operational and executive reporting;
  • Contribute to the execution of exercises, simulations, incident response tests, and continuous improvement initiatives for the (SOC) operational maturity.

Requirements

  • Higher Education in the areas of Computer Engineering, Electrical Engineering, Information Technology, Cybersecurity, or a similar field;
  • Professional experience in security monitoring, event analysis, alert investigation, or incident response roles (preferred);
  • Knowledge of Windows and Linux operating systems, networks, protocols, and SIEM platforms;
  • Knowledge of cybersecurity, vulnerability management, incident response, and log analysis;
  • Experience using monitoring, ticketing, reporting, and collaboration tools;
  • Driver's License;
  • Knowledge of English;
  • Immediate availability (preferred).

We offer

  • Effective integration into a continuity project;
  • Continuous professional training;
  • Social Benefits in force at the company.

More jobs like this

or browse Security·Junior·Transport Infrastructure

WhatsApp

More jobs from Infraestruturas de Portugal

See all 128 jobs

Similar jobs