Explore exciting opportunities at Xtedder and join our dynamic team!

Job Description:

We are looking for a Cybersecurity Operations Engineer with experience in security monitoring, SIEM integration and security event analysis. The professional will support the integration of security data sources into Splunk SIEM, contribute to the improvement of detection use cases and assist SOC operations in the analysis and response to security incidents.

Responsibilities:

• Support the integration of security sources into Splunk SIEM.

• Contribute to the definition, implementation and continuous improvement of detection use cases.

• Support SOC operations, improving threat detection capabilities and reducing false positives.

• Monitor and analyse security alerts from multiple security tools.

• Administer and optimize Trend Micro Deep Security, including installation, configuration and tuning of agents.

• Monitor and validate security events from Cisco, Fortinet and Check Point firewalls, including IPS, Antivirus and Anti-Bot modules.

• Perform security alert analysis and policy tuning when necessary.

• Monitor and analyse events from Cyber-physical Security Systems (CPS) such as Nozomi or Dragos.

• Analyse OT/ICS alerts and tune detection profiles according to operational requirements.

• Collaborate with technical teams in the investigation and mitigation of security incidents.

Requirements:

• Experience in cybersecurity operations or security monitoring.

• Experience with SIEM platforms, preferably Splunk, including security tool integration.

• Experience with Trend Micro Deep Security.

• Knowledge of Cisco, Fortinet and Check Point firewall environments.

• Experience with security modules such as IPS, Antivirus and Anti-Bot.

• Experience in security event monitoring and analysis.

Nice to have

• Experience with OT/ICS security platforms such as Nozomi or Dragos.

• Experience integrating security tools with SIEM platforms.

• Knowledge of Cyber Resilience frameworks and best practices.

• Experience monitoring and analysing security incidents in critical infrastructures.

• Relevant cybersecurity certifications.

Shape your future with us @Xtedder

Av. Engenheiro Duarte Pacheco Amoreiras
Torre 1, Piso 3 S9
1070-101
Lisbon, Portugal