Senior SIEM Engineer

Expleo; Porto; Híbrido; EUR 30 000 - 50 000; Tempo integral

Resumo da oferta

Expleo seeks a security engineer to administer and optimize Microsoft Sentinel environments, develop detection rules with KQL, and manage log sources across Linux and containerized infrastructures.

You will collaborate with infrastructure and security teams, automate tasks with PowerShell, Bash, Python, or Ansible, and produce technical docs and procedures to improve monitoring coverage and reduce false positives.

Qualificações

• Experience administering and optimizing SIEM environments such as Microsoft Sentinel.
• Proficiency in scripting and automation with PowerShell, Bash, Python, and Ansible.
• Hands-on experience with containerized environments using Docker/Podman.

Responsabilidades

• Administration, implementation, and optimization of Microsoft Sentinel environments.
• Development and optimization of detection rules and KQL queries.

Conhecimentos

Microsoft Sentinel

KQL

Log sources integration

Graylog

Logstash

Syslog-ng/NXLog

Windows Event Forwarding

Syslog

PowerShell

Bash

Python

Ansible

Docker/Podman

Linux

Monitoring automation

Ferramentas

Microsoft Sentinel

KQL

Graylog

Logstash

Syslog-ng

NXLog

Windows Event Forwarding

Syslog

PowerShell

Bash

Python

Ansible

Docker/Podman

Linux

Descrição da oferta de emprego

Overview

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.We are as global and local as you need us to be, with strong best-in‑class pan‑European technological centres and unique best‑shoring capabilities.

We leverage a network of high value‑adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever‑changing environment.

Responsibilities

• - Administration, implementation, and optimization of Microsoft Sentinel environments.
• - Development and optimization of detection rules and KQL queries.
• - Integration and management of log sources and security telemetry.
• - Hands‑on experience with Graylog, Logstash, Syslog-ng, NXLog, Windows Event Forwarding (WEF), and Syslog.
• - Automation using PowerShell, Bash, Python, and/or Ansible.
• - Management of Linux environments and security infrastructure.
• - Experience with Docker/Podman and containerized environments.
• - Improving monitoring coverage and reducing false positives.
• - Collaboration with infrastructure, network, and security teams.
• - Production and maintenance of technical documentation and operational procedures.