Senior SIEM Engineer

Expleo Group; Porto; Presencial; EUR 42 000 - 66 000; Tempo integral

Resumo da oferta

Expleo Group is seeking a Security Engineer specializing in Microsoft Sentinel to administer and optimize monitoring environments in Porto, Portugal. You will develop detection rules, manage diverse log sources, and automate workflows using PowerShell, Bash, Python, and Ansible.

You will collaborate with infrastructure, network, and security teams to improve coverage, reduce false positives, and maintain technical documentation for operating procedures.

Qualificações

• Experience administering Microsoft Sentinel environments.
• Ability to develop and optimize detection rules and queries (KQL).
• Experience integrating and managing log sources and security telemetry.

Responsabilidades

• Administration, implementation, and optimization of Microsoft Sentinel environments.
• Development and optimization of detection rules and KQL queries.
• Integration and management of log sources and security telemetry.
• Hands-on experience with Graylog, Logstash, Syslog-ng, NXLog, Windows Event Forwarding (WEF), and Syslog.
• Automation using PowerShell, Bash, Python, and/or Ansible.
• Management of Linux environments and security infrastructure.
• Experience with Docker/Podman and containerized environments.
• Improving monitoring coverage and reducing false positives.
• Collaboration with infrastructure, network, and security teams.
• Production and maintenance of technical documentation and operational procedures.

Conhecimentos

Microsoft Sentinel administration

KQL queries

Log management

Ferramentas

Graylog

Logstash

Syslog-ng

NXLog

Windows Event Forwarding

Syslog

PowerShell

Bash

Python

Ansible

Docker/Podman

Descrição da oferta de emprego

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.

We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities.

We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.

Responsibilities

• Administration, implementation, and optimization of Microsoft Sentinel environments.
• Development and optimization of detection rules and KQL queries.
• Integration and management of log sources and security telemetry.
• Hands-on experience with Graylog, Logstash, Syslog-ng, NXLog, Windows Event Forwarding (WEF), and Syslog.
• Automation using PowerShell, Bash, Python, and/or Ansible.
• Management of Linux environments and security infrastructure.
• Experience with Docker/Podman and containerized environments.
• Improving monitoring coverage and reducing false positives.
• Collaboration with infrastructure, network, and security teams.
• Production and maintenance of technical documentation and operational procedures.