Purple Team Security Engineer (SIEM & Detection)

We are looking for a Purple Team Security Engineer (SIEM & Detection) to join a Cybersecurity Operations team with a strong focus on the development evolution and optimization of the SIEM continuously enhancing detection analysis and incident response capabilities through the collaboration between offensive and defensive security approaches.

Main Responsibilities

• Develop configure and continuously improve the SIEM (IBM QRadar) by creating and tuning rules correlations and use cases for effective security incident detection.
• Perform Ethical Hacking activities within a Red Team context leveraging the results to improve detection and response mechanisms (Blue Team).
• Analyze investigate and implement new security technologies and controls ensuring the protection and monitoring of clients critical assets.
• Identify and mitigate gaps in the security architecture promoting continuous improvement of the overall security posture.
• Provide Level 2 support to the SOC assisting with security incident analysis correlation and handling.
• Support client projects from a security consulting perspective contributing to the definition of security requirements for implemented solutions.
• Collaborate closely with technical teams SOC and stakeholders ensuring accessibility operational effectiveness and alignment with security best practices.

Qualifications :

• Proven experience of more than 2 years in a similar role.
• Experience with SIEM solutions preferably IBM QRadar (or equivalent platforms).
• Experience with Endpoint Detection & Response (EDR) tools such as CrowdStrike (or similar).
• Knowledge of Cloud Computing and related security challenges.
• Familiarity with detection response and threat modeling concepts.
• Experience with IP Networks advanced architectures and integration infrastructures.
• Skills in PowerShell and Shell Scripting for automation and analysis.
• Administration and troubleshooting experience in Linux and Microsoft Windows Server environments.

Valued Technical Skills:

• Offensive security and pentesting tools such as Kali Linux and Burp Suite.
• Knowledge of Kubernetes and containerized environments.

Soft Skills:

• High level of autonomy and ability to manage priorities in complex environments.
• Strong analytical skills critical thinking and problemsolving orientation.
• Ability to communicate technical concepts clearly and in a structured manner.
• Strong team spirit and ability to collaborate in multidisciplinary environments.
• High sense of responsibility attention to detail and strong commitment to the continuous improvement of security.

Additional Information :

• Workplace type: Hybrid (max. of 3 times per week in the office).
• Location: Picoas Lisboa.

Remote Work :

No

Employment Type :

Full-time