Cybersecurity Engineer T2 (ELK)

Cybersecurity Engineer T2 (ELK)

Join to apply for the Cybersecurity Engineer T2 (ELK) role at Claranet Portugal

We’re fast learners, hard workers, natural collaborators… and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely. We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Responsibilities

• Monitoring security alerts generated by tools such as SIEM (Microsoft Sentinel, Forti
  SIEM, Elastic SIEM), EDR, and others;
• Following defined playbooks and procedures for incident response;
• Investigating low to medium complexity security incidents by collecting evidence and analyzing logs;
• Escalating more complex security incidents to senior analysts (L3) or other specialized teams;
• Documenting all actions taken during the analysis and response to an incident in the appropriate ticketing systems;
• Assisting in running vulnerability scans and tracking the status of identified vulnerabilities;
• Contributing to the SOC's knowledge base by documenting new findings and suggesting improvements to procedures.

Qualifications

• A degree in a
  - related field or equivalent practical experience;
• At least 1 year of experience in a cybersecurity role;
• Fluency in English (written and spoken) is essential;
• Familiarity with the concepts of SIEM, especially Elastic SIEM, and EDR (e. g. , Forti
  EDR, Sentinel
  One) tools;
• A basic understanding of networking concepts, operating systems, and cloud security;
• Strong attention to detail and a methodical approach to problem‑solving;
• Good communication skills and the ability to work collaboratively in a team;
• A curious and analytical mindset, with a passion for learning about cybersecurity.

We Value

• Familiarity with Elastic
  Search tools, like being able to use Kibana for queries, dashboards, and knowledge on how to maintain logs pipelines with Logstash.
• Entry-level or associate certifications, such as Elastic Comp
  TIA Security+, Microsoft SC-200 (Security Operations Analyst Associate), or Elastic Certified SIEM Analyst.

Benefits

• Health insurance, with family package;
• Office facilities for meals and snacks;
• Regular teambuilding programs;
• Friendly workplace.

Referrals increase your chances of interviewing at Claranet Portugal by 2x.