Blue Team Incident Response Expert (SIEM/SOAR)

Amgen Capability Center Portugal; Lisboa; Presencial; EUR 42 000 - 68 000; Tempo integral

Resumo da oferta

Inetum in Lisbon is seeking a Cybersecurity Analyst (Blue Team N2) to strengthen our security team, focusing on incident investigation and rapid containment and remediation across systems.

You will investigate incidents escalated by the N1 team, perform in-depth analysis, create SIEM use cases, develop SOAR playbooks, and document procedures to improve security processes. On-site, Monday to Friday, 09:00–18:00, located at Lisbon, Picoas.

Qualificações

• Experience in Blue Team roles (N2 or equivalent).
• Hands-on experience with SIEM configuration and use case creation.
• Experience with SOAR and response automation; security playbook development.
• Experience with ticketing/workflow tools (e.g., Remedy).
• Strong analytical and troubleshooting skills in a cybersecurity context.
• Ability to work autonomously in incident handling and resolution.

Responsabilidades

• Investigate and handle security incidents escalated by the N1 team.
• Perform in-depth technical analysis to identify root causes of incidents.
• Execute containment, remediation, and mitigation actions across systems, networks, and security components.
• Monitor and track incidents through to full resolution.
• Create and optimize use cases within SIEM platforms.
• Develop and maintain incident response playbooks (SOAR).
• Document procedures, solutions, and improvements in the knowledge base.
• Contribute to the continuous improvement of security processes.

Conhecimentos

Blue Team experience

Incident response

Analytical skills

Ferramentas

SIEM

SOAR

Remedy

Descrição da oferta de emprego

Inetum in Lisbon is seeking a Cybersecurity Analyst (Blue Team N2) to strengthen our security team, focusing on incident investigation and rapid containment and remediation across systems.

You will investigate incidents escalated by the N1 team, perform in-depth analysis, create SIEM use cases, develop SOAR playbooks, and document procedures to improve security processes. On-site, Monday to Friday, 09:00–18:00, located at Lisbon, Picoas.