SOC Detection & Incident Response Engineer

Talkdesk; Lisboa; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Talkdesk is seeking a SOC Engineer / Detection Engineer to detect, investigate, and respond to security incidents across our environment. You will work hands-on with our SIEM and incident response processes and act as a key contact between the SOC and other engineering and security teams.

Responsibilities include leading end-to-end incident response, conducting in-depth investigations across logs, endpoints, network, and cloud sources, driving RCAs, and tuning SIEM use cases to reduce false

Qualificações

• Hands-on incident handling, triage, containment, and coordination.
• Strong ability to investigate alerts and logs across SIEM, EDR, network, and cloud.
• Practical SIEM experience with detection rules tuning (Splunk/Sentinel/Elastic/QRadar).
• Proven ability to write post-mortems, RCAs, and incident reports.
• Ability to work cross-functionally with engineering and security teams.
• Willingness to improve detection and response processes.
• Linux/Unix proficiency and comfort with AWS cloud sources.

Responsabilidades

• Lead and support end-to-end response to security incidents, from detection through containment, eradication, and recovery.
• Conduct in-depth investigations into suspicious activity and alerts across logs, endpoints, network, and cloud sources.
• Drive post-incident reviews and RCAs, documenting timelines and actions.
• Implement, tune, and maintain SIEM use cases, detection rules, and correlation logic to reduce false positives.
• Provide ongoing SIEM support, onboarding new log sources, troubleshooting data ingestion, and maintaining dashboards.
• Partner with Engineering, IT, and Security teams to remediate findings and share threat context.
• Identify gaps and drive improvements to playbooks, runbooks, and SOC workflows.

Conhecimentos

Incident response

Log analysis

SIEM tuning

Root cause analysis

Cross-team collaboration

Linux/Unix

AWS

Ferramentas

Splunk

Microsoft Sentinel

Elastic/Elasticsearch

IBM QRadar

Descrição da oferta de emprego

Talkdesk is seeking a SOC Engineer / Detection Engineer to detect, investigate, and respond to security incidents across our environment. You will work hands-on with our SIEM and incident response processes and act as a key contact between the SOC and other engineering and security teams.

Responsibilities include leading end-to-end incident response, conducting in-depth investigations across logs, endpoints, network, and cloud sources, driving RCAs, and tuning SIEM use cases to reduce false