Hybrid SIEM Analyst — Threat Detection & Monitoring

Diconium; Porto; Hybrid; EUR 42,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Professional development opportunities

Job summary

Diconium is seeking a security-focused SIEM engineer to design, implement and optimize security monitoring across cloud, on-prem and hybrid environments.

You will integrate log sources from Microsoft Sentinel, Splunk, Elastic Security and IBM QRadar, develop detection rules and dashboards, and collaborate with stakeholders to strengthen SOC processes.

Strong scripting in Python and PowerShell, plus knowledge of MITRE ATT&CK, are valuable. German language, Terraform, and cloud security are a plus.

Qualifications

• SIEM architecture, implementation and configuration from scratch.
• Experience with security monitoring, log management and correlation.
• Experience in detection engineering, incident analysis and response.
• Scripting skills in Python and PowerShell.
• Knowledge of security frameworks (MITRE ATT&CK).

Responsibilities

• Design, build and optimize SIEM solutions and detection rules.

Skills

SIEM architecture

Implementation

Configuration

Detection engineering

Incident analysis

Python

PowerShell

MITRE ATT&CK

Security monitoring

Log management

Correlation

Tools

Microsoft Sentinel

Splunk

Elastic Security

IBM QRadar

Job description

Diconium is seeking a security-focused SIEM engineer to design, implement and optimize security monitoring across cloud, on-prem and hybrid environments.

You will integrate log sources from Microsoft Sentinel, Splunk, Elastic Security and IBM QRadar, develop detection rules and dashboards, and collaborate with stakeholders to strengthen SOC processes.

Strong scripting in Python and PowerShell, plus knowledge of MITRE ATT&CK, are valuable. German language, Terraform, and cloud security are a plus.