Cybersecurity Engineer Tier 1 - 24/7 Incident Response

Claranet limited; Portugal; Teletrabalho; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Claranet limited in Lisbon/Porto is seeking a Cybersecurity Engineer Tier 1 to join our security operations team. The role focuses on triage, investigation, and rapid resolution of security alerts, with hands-on work across SIEM, EDR/XDR, IDS/IPS, and firewall tools.

The ideal candidate has advanced English, willingness to work 24/7 shifts, and solid experience analyzing security logs and network events. Knowledge of MITRE ATT&CK and NIST supports our security posture.

Qualificações

• Advanced English required.
• Willingness to work 24/7 shifts.
• Hands-on experience with SIEM platforms.
• Experience analysing security logs and network events.
• Solid understanding of network protocols, operating systems and IT architecture.
• Familiarity with security tools such as EDR/XDR, IDS/IPS, firewalls, and endpoint protection.
• Knowledge of cybersecurity frameworks (e.g., MITRE ATT&CK, NIST).

Responsabilidades

• Triage, investigation, and resolution of security alerts.
• Monitor security events and alerts across multiple tools (SIEM, EDR, IDS/IPS, SOAR, etc.).
• Analyze and investigate alerts to identify potential security incidents or suspicious activity.
• Execute initial response and containment actions when applicable.
• Escalate incidents to advanced security teams or relevant technical teams as needed.
• Contribute to the continuous improvement of detection rules and use cases.
• Support the fine-tuning of security tools to reduce false positives.

Conhecimentos

Advanced English

24/7 shift availability

Hands-on SIEM

Security log analysis

Network protocols

IT architecture

EDR/XDR

IDS/IPS

Firewalls

Endpoint protection

MITRE ATT&CK

NIST

Ferramentas

SIEM platforms

EDR/XDR

IDS/IPS

SOAR

Firewalls

Descrição da oferta de emprego

Claranet limited in Lisbon/Porto is seeking a Cybersecurity Engineer Tier 1 to join our security operations team. The role focuses on triage, investigation, and rapid resolution of security alerts, with hands-on work across SIEM, EDR/XDR, IDS/IPS, and firewall tools.

The ideal candidate has advanced English, willingness to work 24/7 shifts, and solid experience analyzing security logs and network events. Knowledge of MITRE ATT&CK and NIST supports our security posture.