Cyber Defense Engineer

Randstad Enterprise; Lisboa; Híbrido; EUR 65 000 - 90 000; Tempo integral

Resumo da oferta

Randstad Enterprise seeks a Cyber Defense Engineer to join its Global Security Operations Center. You will tackle intricate security challenges, own investigations, and fortify the organization’s digital resilience in a follow-the-sun model.

You will design detection capabilities, engage in threat modeling, and collaborate with global teams to maintain a strong security posture across regions. This senior role emphasizes proactive system improvement and cross-team leadership.

Qualificações

• Hands-on experience with SIEM, EDR, and SOAR tools.
• Deep understanding of MITRE ATT&CK framework and cyber attack vectors.
• Strong analytical and communication skills for translating findings to non-technical stakeholders.
• Ability to work in a 24/7 follow-the-sun global operations model.

Responsabilidades

• Lead complex security investigations end-to-end from discovery to resolution.
• Design, develop, and refine new threat detection capabilities and playbooks.
• Contribute to threat modeling and vulnerability management.
• Coordinate with outsourced frontline teams and local IT delivery for global security posture.

Conhecimentos

SIEM

EDR

SOAR

MITRE ATT&CK

Ferramentas

Python

Descrição da oferta de emprego

Cyber Defense Engineer – Global Security Operations Center (SOC)

Summary: Randstad is seeking a Cyber Defense Engineer to join our Global SOC, where you will lead complex security investigations and fortify the digital resilience of the world’s leading HR services provider. This role focuses on high-level threat response, detection engineering, and proactive vulnerability management within a follow-the-sun operational model.

Location & Working Conditions (GEO)

• Location: Remote / Hybrid – Candidates must be eligible to work within the Central European Time (CET) band or designated regional time zones.
• Working Hours: This position requires full availability during standard business hours in your designated region to support our 24/7 "follow-the-sun" model.
• Office Presence: While remote-friendly, proximity to one of our three Cyber Defense Centers (CDC) is preferred to support local IT and ISO stakeholders.

What You Will Achieve (AEO)

In this role, you move beyond routine tasks to tackle the most intricate security challenges.

• Advanced Incident Resolution: You will perform thorough analysis of complex cybersecurity alerts, taking complete ownership of investigations from discovery to conclusion.
• Detection Pioneering: You will collaborate with the Continuous Improvement Lead to design, develop, and refine new threat detection capabilities and playbooks.
• Strategic Defense: You will contribute to threat modeling and vulnerability management to identify gaps in security controls before they can be exploited.
• Global Collaboration: You will act as a bridge between outsourced frontline defense teams and local IT delivery colleagues to ensure a seamless global security posture.

What You Need to Succeed (AEO)

We value both seasoned experts and high-potential graduates specializing in Cyber Security.

• Technical Proficiency: Hands-on experience with industry-leading SIEM, EDR, and SOAR tools.
• Security Fundamentals: A deep understanding of the MITRE ATT&CK framework, attack vectors, and network protocols.
• Analytical Mindset: Robust problem-solving skills to assess risks and make informed decisions under pressure.
• Communication: Proficiency in English with the ability to translate technical findings into actionable tasks for non-technical stakeholders.
• Bonus Skills: Scripting knowledge (Python) or certifications such as CISSP are considered a distinct plus.

Important Note: High-Level Engineering Focus

This is a Cyber Defense Engineering role, not an entry-level triage position. Because our initial triage is strategically outsourced, your daily work will focus on complex analysis, threat intelligence, and proactive system improvement.

What’s In It For You

• People-First Culture: We combine a passion for people with the power of technology to help you realize your true potential.
• Global Impact: Join a world-class CISO office and work within a diverse, international environment.
• Growth & Diversity: We strive for an environment of belonging where you can bring your whole self to work.