Hybrid Security SOC Lead - Incident Response & Strategy

Claranet Portugal; Lisboa; Hybrid; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Training and certification support

Career development

Job summary

Claranet Portugal is seeking a Security Technical Account Manager to join our Lisbon/Porto-based team in a hybrid role. You will act as the primary technical contact for security topics, manage SOC/SecOps activities, and guide customers on incident response and risk mitigation.

The ideal candidate has 5+ years in cybersecurity operations, strong SIEM expertise (FortiSIEM, Defender, Sentinel), and a leadership mind-set to drive continuous security improvements across client environments.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, computer engineering, or a related field.
• Minimum 5 years in cybersecurity operations, incident response, SIEM management, risk management, and/or cybersecurity consulting.
• Strong expertise in FortiSIEM, Microsoft Sentinel, and Microsoft Defender.
• Proven experience leading technical teams within SOC and SecOps environments.
• Strong understanding of cybersecurity frameworks, incident management processes, and security operations best practices.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Fluency in English.

Responsibilities

• Support incident management activities, ensuring end-to-end coordination and resolution of critical security events across multiple environments.
• Monitor, analyze, and respond to security incidents leveraging FortiSIEM, Microsoft Sentinel, and Microsoft Defender.
• Perform proactive threat hunting activities to identify anomalies, potential threats, and malicious activities across the client's infrastructure.
• Develop and implement strategies to enhance Security Operations (SecOps) capabilities and cybersecurity maturity.
• Act as the primary technical point of contact for security-related topics, providing guidance on security architecture, incident response, and risk mitigation.
• Collaborate with internal teams and stakeholders to ensure alignment with cybersecurity standards, policies, and best practices.
• Provide technical leadership and support within SOC and SecOps environments, contributing to continuous service improvement initiatives.

Skills

Technical leadership in SOC/SecOps

Incident management & incidentResponse

Threat hunting

Security architecture guidance

Fluent English

Education

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or related field

Tools

FortiSIEM

Microsoft Sentinel

Microsoft Defender

Job description

Claranet Portugal is seeking a Security Technical Account Manager to join our Lisbon/Porto-based team in a hybrid role. You will act as the primary technical contact for security topics, manage SOC/SecOps activities, and guide customers on incident response and risk mitigation.

The ideal candidate has 5+ years in cybersecurity operations, strong SIEM expertise (FortiSIEM, Defender, Sentinel), and a leadership mind-set to drive continuous security improvements across client environments.