Detection and Response Solution Engineer

Vodafone; Portugal; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Mobile phone plan

Resumo da oferta

Vodafone is recruiting a Detection and Response Solution Engineer in Portugal. The role focuses on providing architecture and design for network-based detection within the VOLT plan, delivering onboarding to analytics toolsets, and ensuring effective integration with SIEM and monitoring teams.

Ideal candidates bring 5+ years in Netflow/PCAP, strong communication skills, and experience across global security teams, delivering secure, scalable network traffic analytics.

Qualificações

• Degree educated (or equivalent) in a relevant subject.
• Agile delivery using Scrum or Kanban methodologies.
• 5+ years experience of Netflow and Full Packet Capture technologies.
• 5+ years experience reviewing network flow data to identify normal and abnormal/malicious traffic trends.
• Experience communicating technical information to all key stakeholder levels.
• Self-motivated and able to work alone or in a team.
• Experience across multiple geographical security team domains.
• Excellent communication and reporting of complex scenarios to stakeholders.
• Fluency in English.

Responsabilidades

• Own the design and delivery of network flow/traffic onboarding to our Centralised Security Analytics toolsets.
• Review strategy and blueprint for network flow/traffic.
• Produce high-level and low-level designs for security analytic toolsets and traffic ingestion patterns.
• Implement configuration for platforms.
• Produce firewall rule requirements for inter-component communications.
• Tune to mitigate false positives in initial deployments.
• Collaborate with BAU teams for platform handover and health monitoring.
• Coordinate with Logging and Monitoring teams to parse alarms to Vodafone SIEM.
• Collaborate with vendors and third parties for product enhancements.

Conhecimentos

Agile delivery

Netflow & PCAP

Network data analysis

Technical communication

Stakeholder communication

Cross-geography collaboration

Fluency in English

Formação académica

Bachelor's degree in a relevant subject

Ferramentas

Netflow tools

Packet capture tools

Descrição da oferta de emprego

Select how often (in days) to receive an alert:

Detection and Response Solution Engineer

Aggregate function: Technology

Business Area: GT Global Cyber Security

Posting Country: Portugal

Full Time / Part Time: Full Time

Contract Type: Permanent

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.

We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can be truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

Global Cyber Security’s role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone’s global technology infrastructure and the sensitive data it holds.

The purpose of the role is to provide Solution Engineering for the Network Detection and Response capability being developed as part of the VOLT acceleration plan. This will involve providing Architecture and Design expertise for the use network-based flow and traffic data to detect, investigate and respond to cyber incidents.

The role requires significant innovation to deliver and strong networks-based knowledge to understand the critical inflexion points that can be used to monitor traffic. The role holder will also need to be able to support the Cyber Defence teams as the develop the skills ton know how to use network-based detection.. This requires strong communication skills and an absolute attention to detail.

This role will be required to operate effectively in a complex, dynamic, and constantly changing environment. Active & compelling engagement of teams and stakeholders will be crucial in creating the momentum required. This role requires a leader who is technically competent, an effective communicator and collaborator to deliver the consistency & risk reduction outcomes required.

What you’ll do

• Own the design and delivery of network flow/traffic onboarding to our Centralised Security Analytics toolsets;
• Review strategy and blueprint for network flow/traffic;
• Produce High-level and Low-level Designs Security Analytic toolset platforms and flow/traffic ingestion patterns;
• Implement configuration;
• Produce firewall rule requirements for platform inter-component communications;
• Perform tuning to mitigate false positives security alarms/events as part of initial deployments;
• Work with the BAU operational teams for platform handover, health monitoring and authentication system onboarding;
• Work with Logging and Monitoring teams to ensure security alarms/events are successfully parsed to the Vodafone SIEM solutions;
• Collaborate with vendors and 3rd parties for product and platform enhancements.

Who you are

• Degree educated (or equivalent) in a relevant subject;
• Agile delivery using Scrum or Kanban methodologies;
• 5+ years experience of Netflow and Full Packet Capture technologies;
• 5+ years experience in reviewing network flow data to identify normal and abnormal/malicious traffic trends;
• Experience communicating technical information to all key stakeholder levels;
• Self-motivated and ability to work alone and as part of a team;
• Experience working across multiple Geographical security team domains;
• Communicating & reporting concise summaries of complex scenarios & information across diverse and senior stakeholder groups;
• Fluency in English.

What's in it for you

• Hybrid Work Model - Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders;
• Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
• Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors;
• Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
• Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
• Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles.

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

Vodafone is committed to attracting, developing and retaining the very best people by offering a motivating and inclusive workplace in which talent is truly recognised and rewarded. We are committed to promoting Inclusion for All with the belief that diversity plays an important role in the success of our business. We actively encourage everyone to consider becoming a part of our journey.