Senior SOC & SIEM Analyst (Hybrid · Flexible Hours)

dPT diconium Portugal, unipessoal Lda; Porto; Ibrido; EUR 50.000 - 80.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work

Flexible hours

Training programs

Descrizione del lavoro

Join Diconium to design, build, and run SIEM solutions that monitor across clouds, networks, and endpoints. You will create detection rules, dashboards and automated responses, collaborating with stakeholders to strengthen SOC processes and threat detection.

You will work in a hybrid environment, leveraging modern SIEM platforms and scripting to optimize security operations. A strong focus on incident analysis and continuous improvement is expected, with opportunities to grow in a diverse tech

Competenze

• Experience in designing and implementing SIEM solutions.
• Strong knowledge of security monitoring, log management and correlation.
• Scripting skills (Python/PowerShell) and incident response knowledge.
• Nice-to-have German language skills and cloud security familiarity.

Mansioni

• Design, build and implement SIEM solutions from scratch.
• Integrate and configure security log sources across clouds, networks, endpoints and apps.
• Develop and optimize detection rules, correlations, dashboards and alerts.
• Monitor, analyze and investigate security events; support incident response.
• Collaborate to define monitoring requirements and improve SOC workflows.
• Automate monitoring and response to reduce manual effort.

Conoscenze

SIEM architecture

Security monitoring

Threat detection

Incident response

Python scripting

PowerShell scripting

Log management

MITRE ATT&CK

Strumenti

Microsoft Sentinel

Splunk

Elastic Security

IBM QRadar

Descrizione del lavoro

Join Diconium to design, build, and run SIEM solutions that monitor across clouds, networks, and endpoints. You will create detection rules, dashboards and automated responses, collaborating with stakeholders to strengthen SOC processes and threat detection.

You will work in a hybrid environment, leveraging modern SIEM platforms and scripting to optimize security operations. A strong focus on incident analysis and continuous improvement is expected, with opportunities to grow in a diverse tech