Senior SIEM Engineer: Design & Automate Security Monitoring

Claranet limited; Porto; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Claranet limited in Porto is seeking a Senior SIEM Engineer to join our internal team. You will design and maintain security monitoring solutions across enterprise environments, focusing on Microsoft Sentinel and Graylog.

Responsibilities include developing detection use cases, onboarding log sources, and automating security operations using multiple scripting languages. You will collaborate with infrastructure and security teams to enhance monitoring capabilities and document procedures.

Qualifications

• Proven experience administering and engineering Microsoft Sentinel environments.
• Strong experience writing and optimizing KQL queries for detection engineering.
• Hands-on knowledge of SIEM technologies such as Microsoft Sentinel and Graylog.
• Experience deploying and maintaining Linux-based security infrastructure.
• Familiarity with Docker, Podman, and containerized deployments.

Responsibilities

• Design, implement, and maintain security monitoring solutions across enterprise environments.
• Develop, tune, and optimize detection use cases within Microsoft Sentinel and other SIEM platforms.
• Engineer and onboard log sources, ensuring data quality, normalization, and operational reliability.
• Create, maintain, and improve KQL detection rules, analytics, watchlists, and threat hunting queries.
• Automate security operations using PowerShell, Bash, Python, Ansible, and other scripting technologies.
• Deploy and manage SIEM infrastructure components, including Graylog, Logstash, Syslog-ng, Docker/Podman, and related services.
• Perform security engineering activities to enhance monitoring coverage and detection capabilities.
• Investigate and improve security telemetry, reducing false positives while increasing detection accuracy.
• Collaborate with infrastructure, networking, and security teams to integrate new technologies into the monitoring ecosystem.
• Develop technical documentation, implementation guides, and operational procedures.
• Support vulnerability management initiatives by improving visibility and security monitoring.
• Ensure security monitoring solutions follow industry best practices and operational standards.

Skills

KQL

Microsoft Sentinel

Scripting

Linux security

Docker/Podman

Log collection

English communication

Tools

Graylog

Job description

Claranet limited in Porto is seeking a Senior SIEM Engineer to join our internal team. You will design and maintain security monitoring solutions across enterprise environments, focusing on Microsoft Sentinel and Graylog.

Responsibilities include developing detection use cases, onboarding log sources, and automating security operations using multiple scripting languages. You will collaborate with infrastructure and security teams to enhance monitoring capabilities and document procedures.