Jobs in Portugal, in English.
12,000+ live jobsSIEM Engineer
Hybrid in Lisbon·Full-time·Added 5 days ago (last checked 28 Oct)
Our summary
- Work mode
- Hybrid, Lisbon
- Contract
- Full-time
Skills
This job advert was originally written in Portuguese.
Requirements
What we're looking for
- Proven experience with Microsoft Sentinel and/or Splunk
- Solid knowledge of logs, parsing, Syslog, APIs, and regular expressions (regex)
- Experience with EDR/XDR solutions (Microsoft Defender, Cisco XDR, Palo Alto Cortex XDR or similar)
Nice to have
- Experience in workflow automation (e.g., n8n, Node-RED, PowerShell, Python)
- Knowledge of cloud security (Azure, AWS)
- Previous experience in SOC, MSSP, or multi-client environments
- Cybersecurity certifications (Microsoft, CompTIA, Palo Alto)
Pay & benefits
What you'll get
- Hybrid and flexible working model
- Training and certification plan
- Experience with international clients and real projects.
- Health insurance and competitive benefits package
- Collaborative and inclusive environment.
Logicalis Portugal believes that diversity strengthens teams and improves results. All applications are welcome and evaluated on an equal basis. You do not need to meet all the listed requirements to apply!
The role
Logicalis is a Global IT Solutions & Digital Services Provider that accelerates the digital transformation of its customers worldwide, through an international network equipped with specialization centers, industry-leading teams, and strategic partnerships (which include Cisco, Microsoft, Dell Technologies, Palo Alto, Citrix, among others).
As Architects of Change™, we reconcile our customers' strategic vision with our technological knowledge in the main industry drivers (such as: Cybersecurity, Managed Digital Fabric, Data & AI, Connectivity, Digital Workplace, Cloud), and we address their priorities, such as operational efficiency, innovation, risk/compliance, and data governance.
Logicalis Portugal is reinforcing its Cybersecurity & Managed Services team and is looking for a SIEM Engineer to join the Security Operations Center (SOC).
This role is fundamental to ensuring the effectiveness of the SIEM platforms used in the monitoring, detection, and response to security incidents in complex, multi-client, and multi-sector environments, operating on a 24/7 model.
What you'll do
- Implement and maintain connectors, integrations, and log ingestion pipelines in SIEM platforms
- Develop, optimize, and maintain use cases, correlation rules, and security alerts
- Ensure the quality, normalization, and availability of security data
- Support investigations conducted by Tier 2 and Tier 3 teams
- Automate response workflows and alert enrichment through APIs
- Document use cases, integrations, and operational best practices
- Contribute to the technical evolution and operational efficiency of the SOC
More jobs like this
or browse Lisbon·Security·Security·Mid-level·Hybrid·Best Workplaces Portugal·IT Services
Security Technical Manager (Network & Security Governance Architect)
Hybrid in Lisbon
Security AI Engineer (Azure/GenAI) - Hybrid Lisbon or Porto (3 days/week office)
Hybrid in Lisbon
€60k
