Descrição da Vaga

SENIOR SECOPS & INCIDENT RESPONSE ANALYST (HYBRID CARNAXIDE)

Portuguese company hires for hybrid position

📍 Location: Carnaxide, Lisbon

⚠️ Only candidates already based in Portugal will be considered

💼 Work Model: Hybrid — 3 days onsite per week

✈️ Travel: Possible travel to Madrid every 2 months

🗣️ Language Requirements: Native or fluent Portuguese; Spanish and English at B2 minimum

🕓 Seniority: Senior (5+ years)

💲Rate Between €3000 - 3500 RV or unipessoal (gross value)

📅 Duration: 6 months, with the possibility of renewal

⚠️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success.

About the Opportunity

We are looking for a Senior SecOps & Incident Response Analyst to handle N2/N3 incidents, optimize SIEM/SOAR tools, and act as the direct backup to the SecOps Lead. The role operates within an Iberian and global environment, combining technical expertise with coordination and decision-making under pressure.

Responsibilities

• Investigate and respond to N2/N3 security incidents.
• Analyze logs, EDR data, and network traffic to identify and understand incidents.
• Optimize SIEM/SOAR tools and automate security processes.
• Support operational coordination and cover for the SecOps Lead when required.
• Prepare executive reports and communicate findings and actions to relevant stakeholders.

Requirements

• At least 5 years of relevant experience in SecOps and incident response.
• Experience investigating security incidents and analyzing logs, EDR data, and network traffic.
• Experience using and optimizing SIEM/SOAR tools.
• Automation knowledge involving Python, scripts, APIs, and ServiceNow/SOAR.
• Ability to produce clear and concise executive reports.
• Informal leadership skills, excellent interpersonal communication, and sound decision-making under pressure.
• Native or fluent Portuguese and at least B2 proficiency in both Spanish and English.

Ideal Candidate Profile

An experienced security operations professional who can take on coordination responsibilities. Able to prioritize actions during incidents, support the team, and clearly communicate technical information to both specialists and executive stakeholders.

5 Questions for Candidates

1. How many years of experience do you have in SecOps and N2/N3 incident response?
2. Can you describe an incident you investigated using logs, EDR, and network traffic analysis?
3. Which SIEM/SOAR tools have you used, and what processes have you automated with Python, scripts, or APIs?
4. Have you covered for a SecOps Lead or coordinated incident response, including executive communication?
5. Do you meet the language requirements and agree with the rate, duration, hybrid arrangement in Carnaxide, and possible travel to Madrid every two months?

Keywords

SecOps, Incident Response, N2/N3, SIEM, SOAR, EDR, Log Analysis, Network Traffic, Python, APIs, ServiceNow, Coordination, Executive Reporting.

#LM