Security SIEM & Log Integration Engineer

Affinity; Porto; Híbrido; EUR 50 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Training and certifications

Work-life balance

Resumo da oferta

Affinity seeks a security-focused engineer to design and maintain enterprise security monitoring using SIEM technologies. You will develop KQL rules, hunt threats, and manage log ingestion across multi-country environments.

Responsibilities include automating security ops with PowerShell, Bash, Python, or Ansible, and deploying Linux-based SIEM stacks with Graylog, Logstash, Docker, and Podman. Collaboration with cross-functional teams is essential.

Qualificações

• Experience designing and maintaining enterprise security monitoring solutions with SIEM
• Hands-on with Microsoft Sentinel, KQL, Linux, scripting and containerized environments
• Ability to manage log ingestion, telemetry and security monitoring across large environments
• Familiarity with automation of security operations using common scripting tools

Responsabilidades

• Design and maintain security monitoring with SIEM platforms
• Develop and optimize KQL detection rules and threat hunting queries
• Manage log ingestion and telemetry across enterprise environments
• Automate security operations using PowerShell, Bash, Python or Ansible
• Deploy and support Linux-based SIEM infrastructure including Graylog, Logstash, Docker, Podman
• Collaborate with cross-functional teams to improve security monitoring and visibility
• Apply hands-on expertise with Microsoft Sentinel, KQL, SIEM, Linux, scripting and containers

Conhecimentos

Security monitoring

Threat hunting

SIEM technologies

Cross-functional collaboration

Ferramentas

Microsoft Sentinel

KQL

Graylog

Logstash

Docker

Podman

Linux

PowerShell

Bash

Python

Ansible

Descrição da oferta de emprego

Affinity seeks a security-focused engineer to design and maintain enterprise security monitoring using SIEM technologies. You will develop KQL rules, hunt threats, and manage log ingestion across multi-country environments.

Responsibilities include automating security ops with PowerShell, Bash, Python, or Ansible, and deploying Linux-based SIEM stacks with Graylog, Logstash, Docker, and Podman. Collaboration with cross-functional teams is essential.