Senior Cybersecurity Consultant – Microsoft Sentinel

Expleo; Lisboa; On-site; EUR 90,000 - 110,000; Full time

Job summary

Expleo is seeking a skilled cybersecurity professional in Lisbon to support security operations, analytics and incident management. You will configure Microsoft Sentinel, develop dashboards, and coordinate penetration testing efforts with service owners and technical teams.

You will analyse logs, assess risks, and translate findings into remediation plans, while maintaining strong documentation and collaboration with stakeholders across the organization. English proficiency is mandatory.

Qualifications

• 5+ years of professional experience in cybersecurity, security operations or a related field.
• Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• Experience in security log analysis, threat identification, incident investigation and remediation.
• Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• Ability to assess security findings based on severity, business impact and risk.
• Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• Strong analytical, problem-solving and documentation skills.
• English proficiency at C1 level - mandatory.

Responsibilities

• Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• Correlate security log data across multiple sources to improve threat visibility and incident detection.
• Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Skills

Cybersecurity

Security operations

Microsoft Sentinel

Log analysis

Incident investigation

Remediation planning

Penetration testing

Stakeholder coordination

English C1

Job description

Overview

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities.

We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.

Responsibilities

• - Configure and maintain Microsoft Sentinel to support security incident management, alerting and threat detection.
• - Define and implement analytics rules for key security use cases, configuring automated incident creation, alert prioritisation and escalation workflows.
• - Validate alert thresholds to minimise false positives and improve threat detection effectiveness.
• - Develop security dashboards, monitoring reports and operational runbooks to support security teams.
• - Coordinate independent penetration testing engagements, including scope definition, access management, evidence collection and stakeholder coordination.
• - Analyse penetration testing findings, assess severity and business impact, and develop remediation plans with service owners and technical teams.
• - Analyse security logs to establish baseline activity, identify anomalies and investigate potential threats, suspicious behaviour and indicators of compromise.
• - Correlate security log data across multiple sources to improve threat visibility and incident detection.
• - Document identified risks, recommended mitigations and remediation actions, tracking progress and validating the implementation of security controls.

Essential skills

• - 5+ years of professional experience in cybersecurity, security operations or a related field.
• - Hands-on experience with Microsoft Sentinel, including analytics rules, incident management and alert configuration.
• - Experience in security log analysis, threat identification, incident investigation and remediation.
• - Knowledge of penetration testing processes, vulnerability assessment and remediation planning.
• - Ability to assess security findings based on severity, business impact and risk.
• - Experience coordinating with technical teams, service owners and other stakeholders to implement security improvements.
• - Strong analytical, problem-solving and documentation skills.
• - English proficiency at C1 level - mandatory.

Desired skills

• - Experience developing automated security workflows and incident escalation processes.
• - Experience creating security dashboards, monitoring reports and operational runbooks.
• - Knowledge of threat detection techniques, indicators of compromise (IoCs) and log correlation across multiple systems.
• - Experience coordinating external penetration testing providers and managing remediation activities.
• - Familiarity with security frameworks, risk management practices and security control validation.