Senior Cybersecurity Engineer & Architect — SIEM/EDR Lead

Hexa People; Lisboa; On-site; EUR 50,000 - 75,000; Full time

Job summary

Hexa People is looking for an experienced Cybersecurity Engineer/Architect to be the on-site technical security lead for a client environment in Lisbon, working closely with a remote SOC. This hands-on role focuses on improving detection capabilities, managing critical security infrastructure, and strengthening the organisation's security posture through SIEM/EDR, WAF, and incident response.

Collaborate with cross-functional teams to close security gaps and act as the primary liaison between the

Qualifications

• Degree or equivalent qualification in Computer Science, Cybersecurity, IT Engineering or a related field.
• Strong technical English; Portuguese proficiency is desirable.
• At least five years of hands-on experience in SOC operations, Security Engineering or related cybersecurity environments.
• Proven experience with WAF technologies, ideally Fortinet FortiWeb, alongside Fortinet NGFW and Check Point.
• Solid experience with SIEM detection engineering, security event correlation and EDR technologies (QRadar and Cybereason).

Responsibilities

• Design, implement and optimise SIEM and EDR detection rules and correlation use cases.
• Administer and maintain Fortinet FortiWeb WAF infrastructure, including rule management and tuning.
• Configure and optimise security log sources and SIEM data integrations.
• Identify architectural security gaps and recommend improvements.
• Serve as the primary on-site liaison between the client and the remote SOC team.

Skills

SIEM engineering

EDR technology

WAF Fortinet FortiWeb

Fortinet NGFW

Check Point

QRadar

Cybereason

Education

Computer Science degree

Tools

FortiWeb

FortiGate

QRadar

Cybereason

Job description

Hexa People is looking for an experienced Cybersecurity Engineer/Architect to be the on-site technical security lead for a client environment in Lisbon, working closely with a remote SOC. This hands-on role focuses on improving detection capabilities, managing critical security infrastructure, and strengthening the organisation's security posture through SIEM/EDR, WAF, and incident response.

Collaborate with cross-functional teams to close security gaps and act as the primary liaison between the