Senior SIEM Operations Engineer Porto

Senior SIEM Operations Engineer
Porto
Porto, Porto District, Portugal

About the job Senior SIEM Operations Engineer

Just Vargas is a human resources consultancy that recruits, trains, and supports talent, helping both companies and professionals reach their full potential.

We are recruiting for a leading company in the financial sector. We are looking for a Senior SIEM Operations Engineer who will ensure the stability, performance, and continuous improvement of the IBM QRadar environment and its supporting infrastructure. This person will play a critical role in maintaining security visibility across the organization by managing log sources, optimizing system performance, and supporting incident response capabilities.

Key Responsibilities

• Operate and maintain the IBM QRadar SIEM environment, including updates, configuration changes, and coordination of hardware services (remote only);
• Support and maintain auxiliary systems such as Git servers, rsyslog servers, and other Linux-based services;
• Participate in
  - call rotations to ensure 24/7 operational support;
• Manage approximately 23, 000 log sources ensuring they are active, correctly transmitting data, and properly parsed within QRadar;
• Add new log sources and decommission inactive ones to maintain data accuracy and consistency;
• Perform capacity planning and lifecycle management of all SIEM components;
• Analyse, optimize, and develop scripts in Python, Bash, or Perl to automate and enhance daily operations;
• Maintain and improve logging protocol standards defining what should be logged, testing, and implementing updated standards across the environment;
• Coordinate daily operational activities within the SIEM team to ensure smooth execution of tasks and compliance with service expectations;
• Act as a technical escalation point and mentor for junior and
  - level engineers, ensuring effective knowledge transfer and professional growth.

Requirements

• Proven professional experience with IBM QRadar administration and log source management;
• Proficiency in Linux system administration and scripting (Python, Bash, or Perl);
• Experience with Git and centralized logging systems such as rsyslog;
• Comfortable working in
  - availability and
  - focused environments;
• Strong analytical and
  - solving mindset;
• Excellent communication skills and a proactive,
  - oriented attitude;
• ITIL Certification or equivalent qualification (foundational knowledge in IT service management);
• IBM QRadar Certification (Associate Administrator, Deployment Professional, or Analyst) -mandatory;
• Linux Professional Certification Level 2 or Red Hat Certified Engineer (RHCE) - recommended;
• Cisco Certified Network Associate (CCNA) or equivalent networking certification - recommended;
• Exposure to SIEM tuning, rule optimization, and
  - based or hybrid environments (considered a plus);
• Knowledge of security frameworks and compliance standards (ISO 27001, NIST);

Experience with automation tools and CI/CD pipelines.