Lead Microsoft Sentinel Security Strategist

Expleo Group; Lisboa; Sur place; EUR 55 000 - 75 000; Plein temps

Résumé du poste

Expleo Group in Lisbon, Portugal seeks a seasoned cybersecurity professional to join our security operations team. You will configure and manage Microsoft Sentinel, develop analytics rules, and lead incident detection and response efforts across the organization.

You will assess risks, coordinate with technical teams and external testers, and contribute to security improvements through data-driven analysis and documentation.

Qualifications

• 5+ years of professional experience in cybersecurity, security operations or related field.
• Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• Experience in security log analysis, threat identification, incident investigation and remediation.
• Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• Ability to assess security findings based on severity, business impact and risk.
• Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• Strong analytical, problem-solving and documentation skills.
• English proficiency at C1 level is mandatory.

Responsabilités

• Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• Correlate security log data across multiple sources to improve threat visibility and incident detection.
• Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Connaissances

Cybersecurity experience

Microsoft Sentinel

Security log analysis

Penetration testing knowledge

Risk assessment

Stakeholder coordination

Analytical skills

English (C1)

Description du poste

Expleo Group in Lisbon, Portugal seeks a seasoned cybersecurity professional to join our security operations team. You will configure and manage Microsoft Sentinel, develop analytics rules, and lead incident detection and response efforts across the organization.

You will assess risks, coordinate with technical teams and external testers, and contribute to security improvements through data-driven analysis and documentation.