Senior Cybersecurity Consultant – Microsoft Sentinel

Expleo Group; Lisboa; On-site; EUR 55,000 - 75,000; Full time

Job summary

Expleo Group in Lisbon, Portugal seeks a seasoned cybersecurity professional to join our security operations team. You will configure and manage Microsoft Sentinel, develop analytics rules, and lead incident detection and response efforts across the organization.

You will assess risks, coordinate with technical teams and external testers, and contribute to security improvements through data-driven analysis and documentation.

Qualifications

• 5+ years of professional experience in cybersecurity, security operations or related field.
• Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• Experience in security log analysis, threat identification, incident investigation and remediation.
• Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• Ability to assess security findings based on severity, business impact and risk.
• Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• Strong analytical, problem-solving and documentation skills.
• English proficiency at C1 level is mandatory.

Responsibilities

• Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• Correlate security log data across multiple sources to improve threat visibility and incident detection.
• Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Skills

Cybersecurity experience

Microsoft Sentinel

Security log analysis

Penetration testing knowledge

Risk assessment

Stakeholder coordination

Analytical skills

English (C1)

Job description

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.

We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities.

We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.

Responsibilities

• Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• Correlate security log data across multiple sources to improve threat visibility and incident detection.
• Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Essential Skills

• 5+ years of professional experience in cybersecurity, security operations or a related field.
• Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• Experience in security log analysis, threat identification, incident investigation and remediation.
• Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• Ability to assess security findings based on severity, business impact and risk.
• Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• Strong analytical, problem-solving and documentation skills.
• English proficiency at C1 level - mandatory.

Desired Skills

• Experience developing automated security workflows and incident escalation processes.
• Experience creating security dashboards, monitoring reports and operational runbooks.
• Knowledge of threat detection techniques, indicators of compromise (IoCs) and log correlation across multiple systems.
• Experience coordinating external penetration testing providers and managing remediation activities.
• Familiarity with security frameworks, risk management practices and security control validation.