Security Engineer: Incident Response & SIEM Architect

Expleo; Lisboa; On-site; EUR 60,000 - 100,000; Full time

Job summary

Expleo is a trusted partner for your innovation journey, delivering engineering, technology and consulting services with a global reach. We help clients accelerate value while ensuring secure, resilient operations across their value chain.

The role emphasizes security engineering and incident response, with hands-on work in SIEM/IDS and detection engineering, vulnerability management, scripting and automation, and strong technical leadership with stakeholder collaboration.

Qualifications

• Solid professional experience in Security Engineering and Incident Response.
• Experience with SIEM, IDS and Detection Engineering, including the development, optimization, and maintenance of detection rules, preferably using Splunk.
• Solid knowledge of Security Architecture and Vulnerability Management, including the implementation of security controls, risk assessment, and vulnerability remediation.
• Experience in script development, automation, and integrations, with a focus on scalability, operational efficiency, and solution reliability.
• Technical leadership skills, risk analysis, defining security strategies, and communicating with stakeholders, including mentoring and technical consulting.
• Excellent communication skills in English, with a collaborative spirit, problem-solving abilities, and attention to detail.

Skills

Security Engineering

Incident Response

SIEM

IDS

Detection Engineering

Splunk

Security Architecture

Vulnerability Management

Risk Assessment

Automation

Scripting

Technical Leadership

English Communication

Job description

Expleo is a trusted partner for your innovation journey, delivering engineering, technology and consulting services with a global reach. We help clients accelerate value while ensuring secure, resilient operations across their value chain.

The role emphasizes security engineering and incident response, with hands-on work in SIEM/IDS and detection engineering, vulnerability management, scripting and automation, and strong technical leadership with stakeholder collaboration.