Remote Security Engineer III — SIEM Defense Automation

Jobgether; Portugal; À distance; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Remote work

Equity

25 days paid time off

Coworking access

Team events

Equipment provided

Home office stipend

Learning budget

Private medical insurance

Additional location-based perks

Professional onboarding

Résumé du poste

Jobgether is seeking a Security Engineer III - Security Operations based in Portugal to own detection and response capabilities. You will build and optimize SIEM detections, automate response workflows with Python and no-code tools, and collaborate across cloud, compliance, and incident response domains.

The ideal candidate will have hands-on SIEM experience (Elastic preferred), cloud security skills in AWS, and strong scripting abilities.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections.
• Experience securing AWS environments and implementing cloud-native detection/response capabilities.
• Proficiency in Python for scripting, automation, and security tooling.
• Experience with Terraform or other infrastructure-as-code technologies.
• Familiarity with MITRE ATT&CK and threat detection concepts.

Responsabilités

• Plan and deliver end-to-end detection and response initiatives, from creating detection rules to implementing automated response workflows.
• Build, tune, and maintain security detections across Elastic SIEM and AWS environments.
• Manage the security investigation queue by triaging alerts, investigating incidents, and escalating when needed.
• Document investigations and findings to support follow-up actions and knowledge sharing.
• Develop runbooks and automation using Python and no-code tools to reduce manual work.

Connaissances

SIEM detections

Python scripting

Incident investigation

Cloud security

On-call incident response

Outils

Elastic SIEM

Splunk

Microsoft Sentinel

Terraform

Zapier

Tines

Description du poste

Jobgether is seeking a Security Engineer III - Security Operations based in Portugal to own detection and response capabilities. You will build and optimize SIEM detections, automate response workflows with Python and no-code tools, and collaborate across cloud, compliance, and incident response domains.

The ideal candidate will have hands-on SIEM experience (Elastic preferred), cloud security skills in AWS, and strong scripting abilities.