Lisbon On-Site Incident Response Lead (SOC)

Hexa People; Lisboa; On-site; EUR 70,000 - 95,000; Full time

Job summary

Hexa People in Lisbon is seeking an experienced Cybersecurity Incident Handler to join a hands-on security operations team. You will serve as the on-site contact between the remote SOC and client IT teams, coordinating investigations and timely response actions.

The role requires strong incident management, technical investigation skills, and the ability to communicate with business and technical stakeholders. On-site work in Lisbon is required.

Qualifications

• Degree or relevant vocational qualification in Computer Science, IT, or Electrical Engineering.
• 5+ years of experience in SOC operations and incident response.
• Hands-on knowledge of IBM QRadar SIEM and standard security technologies.

Responsibilities

• Coordinate the full incident response lifecycle from initial assessment to containment and recovery.
• Analyse events, correlate logs and reconstruct timelines to identify attack paths and exfiltration.
• Provide technical recommendations and coordinate containment and remediation with IT teams.
• Investigate suspicious network traffic and security alerts across enterprise environments.
• Serve as on-site liaison between the remote SOC and client stakeholders with clear communication.

Skills

SOC operations

Cybersecurity incident response

Incident investigation

Stakeholder communication

English proficiency

Portuguese communication

Education

Degree or vocational qualification in Computer Science / IT / Electrical Engineering

Tools

IBM QRadar SIEM

Microsoft Defender

Microsoft 365

Azure

Cisco

Fortinet

Check Point

Job description

Hexa People in Lisbon is seeking an experienced Cybersecurity Incident Handler to join a hands-on security operations team. You will serve as the on-site contact between the remote SOC and client IT teams, coordinating investigations and timely response actions.

The role requires strong incident management, technical investigation skills, and the ability to communicate with business and technical stakeholders. On-site work in Lisbon is required.