Microsoft Sentinel Lead: Threat Detection & Pentesting

Expleo; Lisboa; On-site; EUR 90,000 - 110,000; Full time

Job summary

Expleo is seeking a skilled cybersecurity professional in Lisbon to support security operations, analytics and incident management. You will configure Microsoft Sentinel, develop dashboards, and coordinate penetration testing efforts with service owners and technical teams.

You will analyse logs, assess risks, and translate findings into remediation plans, while maintaining strong documentation and collaboration with stakeholders across the organization. English proficiency is mandatory.

Qualifications

• 5+ years of professional experience in cybersecurity, security operations or a related field.
• Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• Experience in security log analysis, threat identification, incident investigation and remediation.
• Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• Ability to assess security findings based on severity, business impact and risk.
• Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• Strong analytical, problem-solving and documentation skills.
• English proficiency at C1 level - mandatory.

Responsibilities

• Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• Correlate security log data across multiple sources to improve threat visibility and incident detection.
• Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Skills

Cybersecurity

Security operations

Microsoft Sentinel

Log analysis

Incident investigation

Remediation planning

Penetration testing

Stakeholder coordination

English C1

Job description

Expleo is seeking a skilled cybersecurity professional in Lisbon to support security operations, analytics and incident management. You will configure Microsoft Sentinel, develop dashboards, and coordinate penetration testing efforts with service owners and technical teams.

You will analyse logs, assess risks, and translate findings into remediation plans, while maintaining strong documentation and collaboration with stakeholders across the organization. English proficiency is mandatory.