SOC & SIEM Analyst

Diconium; Porto; Hybrid; EUR 42,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Professional development opportunities

Job summary

Diconium is seeking a security-focused SIEM engineer to design, implement and optimize security monitoring across cloud, on-prem and hybrid environments.

You will integrate log sources from Microsoft Sentinel, Splunk, Elastic Security and IBM QRadar, develop detection rules and dashboards, and collaborate with stakeholders to strengthen SOC processes.

Strong scripting in Python and PowerShell, plus knowledge of MITRE ATT&CK, are valuable. German language, Terraform, and cloud security are a plus.

Qualifications

• SIEM architecture, implementation and configuration from scratch.
• Experience with security monitoring, log management and correlation.
• Experience in detection engineering, incident analysis and response.
• Scripting skills in Python and PowerShell.
• Knowledge of security frameworks (MITRE ATT&CK).

Responsibilities

• Design, build and optimize SIEM solutions and detection rules.

Skills

SIEM architecture

Implementation

Configuration

Detection engineering

Incident analysis

Python

PowerShell

MITRE ATT&CK

Security monitoring

Log management

Correlation

Tools

Microsoft Sentinel

Splunk

Elastic Security

IBM QRadar

Job description

Join our global team of experts

At Diconium, you will work on projects that connect software, data, AI, and human expertise to create digital products, services, and operating models that deliver measurable business impact. Together with 2,500 experts across our international teams, you will help build, run, and scale intelligence across the full value chain.

At Diconium, you will work on projects that connect software, data, AI, and human expertise to create digital products, services, and operating models that deliver measurable business impact. Together with 2,500 experts across our international teams, you will help build, run, and scale intelligence across the full value chain.

In everything we do, we prioritize people and genuine human connections, ensuring a supportive and inclusive work environment. Our hybrid workplace also provides a high degree of flexibility.

Your Tasks

• You design, build, and implement Security Information and Event Management (SIEM) solutions from scratch, ensuring efficient security monitoring and threat detection across different environments.
• You integrate and configure security log sources from cloud platforms, networks, endpoints, and applications, ensuring effective data collection, parsing, normalization, and correlation.
• You develop and optimize detection rules, correlation use cases, dashboards, and alerting mechanisms to identify potential security threats and suspicious activities.
• You monitor, analyze, and investigate security events and incidents, supporting incident response activities and continuous improvement of detection capabilities.
• You collaborate with internal and external stakeholders to define security monitoring requirements, implement best practices, and continuously improve SOC processes and workflows.
• You automate security monitoring and response activities, reducing manual effort and improving the efficiency and effectiveness of security operations.

Your Profile

SIEM architecture, implementation and configuration from scratch (e.g., Microsoft Sentinel, Splunk, Elastic Security, IBM QRadar), security monitoring, log management and correlation, detection engineering, incident analysis and response, scripting (Python / PowerShell), knowledge of network security and security frameworks (MITRE ATT&CK).

Nice-to-have

German language skills, cloud security (Azure / AWS), SOAR platforms, threat hunting, threat intelligence, infrastructure as code (Terraform).

What We Have To Offer

Discover new skills and improve your strengths, adapt your working day to your personal lifestyle, celebrate community, sustainability and diversity. And sweeten your working life with awesome perks and benefits!

Professional & Personal Growth:

Develop yourself both professionally and personally through training programs, free language courses, competence centers and an active tech community.

Flexible Work-Life Balance:

Benefit from hybrid work, workation, flexible hours, parental support and sabbaticals.

Embrace Diversity & Sustainability:

Engage in our Sustainability Hub, diverse communities, Diversity Taskforce and after-work activities.

Comprehensive Benefits:

Enjoy public transport tickets, job bikes, health offers, supplementary insurances, a pension plan and various discounts.

What We Value

At Diconium, we value and recognize the unique perspectives and experiences of each individual. With this in mind, we welcome and cherish every single application equally. At the same time, we stand up against any type of discrimination and harassment based on gender, age, skin color, religion, sexual orientation, origin, disability, gender identity and other protected characteristics.

If you have any questions, feel free to reach out.

Your contact person is
Luís, [e-mail]