Senior SIEM Engineer: Sentinel & Detection Automation

Expleo; Porto; Híbrido; EUR 30 000 - 50 000; Tempo integral

Resumo da oferta

Expleo seeks a security engineer to administer and optimize Microsoft Sentinel environments, develop detection rules with KQL, and manage log sources across Linux and containerized infrastructures.

You will collaborate with infrastructure and security teams, automate tasks with PowerShell, Bash, Python, or Ansible, and produce technical docs and procedures to improve monitoring coverage and reduce false positives.

Qualificações

• Experience administering and optimizing SIEM environments such as Microsoft Sentinel.
• Proficiency in scripting and automation with PowerShell, Bash, Python, and Ansible.
• Hands-on experience with containerized environments using Docker/Podman.

Responsabilidades

• Administration, implementation, and optimization of Microsoft Sentinel environments.
• Development and optimization of detection rules and KQL queries.

Conhecimentos

Microsoft Sentinel

KQL

Log sources integration

Graylog

Logstash

Syslog-ng/NXLog

Windows Event Forwarding

Syslog

PowerShell

Bash

Python

Ansible

Docker/Podman

Linux

Monitoring automation

Ferramentas

Microsoft Sentinel

KQL

Graylog

Logstash

Syslog-ng

NXLog

Windows Event Forwarding

Syslog

PowerShell

Bash

Python

Ansible

Docker/Podman

Linux

Descrição da oferta de emprego

Expleo seeks a security engineer to administer and optimize Microsoft Sentinel environments, develop detection rules with KQL, and manage log sources across Linux and containerized infrastructures.

You will collaborate with infrastructure and security teams, automate tasks with PowerShell, Bash, Python, or Ansible, and produce technical docs and procedures to improve monitoring coverage and reduce false positives.