Cybersecurity Engineer Tier 1
Summary
A Tier 1 Cybersecurity Engineer triages, investigates, and resolves security alerts using SIEM, EDR, IDS/IPS, and SOAR tools, while improving detection rules and reducing false positives. The role focuses on real-time threat monitoring, incident response, and collaboration with advanced security teams.
We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!
Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.
We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.
If you share our vision, join us!
Right now, we are looking for a Cybersecurity Engineer Tier 1 to integrate our internal team, based in Lisbon/ Porto.
Your responsibilities include:
- Triage, investigation, and resolution of security alerts
- Monitor security events and alerts across multiple tools (SIEM, EDR, IDS/IPS, SOAR, etc.)
- Analyze and investigate alerts to identify potential security incidents or suspicious activity
- Execute initial response and containment actions when applicable
- Escalate incidents to advanced security teams or relevant technical teams as needed
- Contribute to the continuous improvement of detection rules and use cases
- Support the fine-tuning of security tools to reduce false positives
You must have:
- Advanced English
- Availability for 24/7 shift work
- Hands-on experience with SIEM platforms
- Experience analysing security logs and network events
- Solid understanding of network protocols, operating systems, and IT architecture
- Familiarity with security tools such as EDR/XDR, IDS/IPS, firewalls, and endpoint protection
- Knowledge of cybersecurity frameworks (e.g., MITRE ATT&CK, NIST)
- Experience with security incident management processes
We value:
- Knowledge of security automation and orchestration tools (SOAR)
- Relevant cybersecurity certifications (e.g., CompTIA Security+, CySA+, GCIH, SC-200)
We offer:
- Regular professional development;
- Certification paths resources;
- Regular teambuilding programs;
- Friendly workplace.
Workplace: Lisbon/Porto - Hybrid
Claranet: Make Modern Happen!