Senior Soc Consultant
Summary
Senior cybersecurity consultant joining a global SOC center of excellence in Portugal, working on international projects in one of three tracks: L2/L3 alert triage and incident response, SIEM/security engineering, or threat intelligence and hunting. Core stack: Splunk/QRadar/Sentinel, EDR/XDR, MITRE ATT&CK, Python/PowerShell/KQL.
Descrição
We are seeking a Senior SOC Analyst (L2/L3), a Senior SOC Engineer and a Threat Intelligence & Threat Hunter Specialist to join a world-class team within a Global Engineering Center of Excellence (TEE). This role is based in Portugal, but focuses on strategic international projects. This is a premier opportunity to lead complex network transformations on a global scale. Apply now!
Responsabilidades
- To perform L2/L3 triage and advanced analysis of security alerts from SIEM, EDR/XDR, and WAF (Senior SOC Analyst);
- To architect, deploy, and maintain SIEM platforms and data ingestion pipelines (Senior SOC Engineer);
- To conduct structured and unstructured threat hunting using behavioral analytics and hypotheses (Threat Intelligence & Hunter Specialist);
- To handle security incidents including containment, eradication, and recovery for malware and ransomware (Senior SOC Analyst);
- To track APT groups, malware families, and TTP evolution to develop detection content (Threat Intelligence & Hunter Specialist);
- To act as an escalation point for junior analysts and support root cause analysis (Senior SOC Analyst);
- To Implement normalization, parsing, and correlation logic across cloud and on-prem environments (Senior SOC Engineer);
- To deliver actionable intelligence reports to SOC, DFIR, and leadership stakeholders (Threat Intelligence & Hunter Specialist).
Requisitos
- Bachelor’s degree (or equivalent) with at least 1 year of experience in similar cybersecurity roles;
- Experience of 4–5 years in SOC operations (Senior SOC Analyst); 4+ years in security engineering (Senior SOC Engineer); 3+ years in threat intelligence/hunting (Threat Intelligence & Hunter Specialist);
- Fluency in English (written and spoken) is mandatory for this international environment;
- Proficiency in Splunk, QRadar, or Microsoft Sentinel (Senior SOC Analyst & Engineer); Expertise in CTI platforms like MISP, OpenCTI, or Anomali (Threat Intelligence & Hunter Specialist);
- Advanced log analysis and MITRE ATT&CK mapping (Senior SOC Analyst); Scripting in Python, PowerShell, or KQL for automation (Senior SOC Engineer); Malware and phishing analysis using Ghidra or VirusTotal (Threat Intelligence & Hunter Specialist)
- Knowledge of Windows/Linux, Active Directory, and Cloud Security fundamentals (Senior SOC Analyst & Engineer); Advanced network analysis using Zeek, Suricata, and PCAP review (Threat Intelligence & Hunter Specialist);
- The ability to exercise independent judgment, discretion, and rigorous risk analysis;
- Willingness and full availability to travel internationally on short notice.