SIEM Operations Engineer Porto

SIEM Operations Engineer
Porto
Porto, Porto, Portugal

Who is Volkswagen Financial Services?

It's been more than 70 years since Volkswagen Financial Services AG financed the first Volkswagen vehicles in Germany in 1949. A lot has changed since then, but our core goal hasn't; ensuring we meet the mobility needs of the people.

Volkswagen Financial Services today operates in 48 markets through its various subsidiaries, shareholdings, and joint ventures. Volkswagen Financial Services is the largest provider of automotive financial services worldwide.

At VWFS Porto, we are proud to foster a
- equal workplace, where diversity is celebrated, and every individual is provided with equal opportunities to thrive and succeed.

What do we do?

VWFS Porto is a VWFS AG IT hub, and the first outside Germany. Here we will establish a
- term Business & IT company. Our primary goal is to service all European markets in implementing and maintaining contract management systems and another IT projects in other areas. Our focus is on: Core systems, satellite systems (such as document management systems, collection systems) but also extends to integrations, data, and large project organizations. For this we seek a
- on SIEM Operations Engineer.

Objectives:

As a SIEM Operations Engineer, you will play a key role in maintaining and enhancing the IBM QRadar environment and its supporting infrastructure. You will be responsible for ensuring system reliability, managing log source integrations, and contributing to the development of automation and monitoring solutions. This role requires a solid understanding of SIEM operations and the ability to work independently on moderately complex tasks while collaborating with senior engineers on strategic initiatives.

In this role you will be responsible for:

• Operating and maintaining the IBM QRadar SIEM environment, including updates and configuration changes;
• Supporting and maintaining auxiliary systems such as Git servers, rsyslog servers, and other Linux-based services;
• Participating in
  - call duty rotations to ensure 24/7 operational support;
• Managing approximately 23, 000 log sources:
• Ensuring all log sources are active and sending correct data;
• Adding new log sources and decommissioning inactive ones;
• Verifying data parsing and normalization within QRadar;
• Contribute to capacity planning and lifecycle management of all components;
• Develop and maintain scripts (Python, Bash, or Perl) to automate routine tasks.
• Support the implementation and testing of logging standards.

We believe that the right profile for this job should have / be:

• 2–4 years of experience in SIEM operations or security infrastructure;
• Working knowledge of IBM QRadar or similar SIEM platforms;
• Proficient in Linux system administration and scripting (Python, Bash, or Perl);
• Familiar with Git and centralized logging systems like rsyslog;
• Comfortable working in a
  - availability,
  - focused environment;
• Strong analytical and troubleshooting skills;
• Good communication skills and a proactive,
  - oriented attitude;
• IBM QRadar Certification (Associate Administrator) - [Recommended];
• Linux Professional Certification Level 1 or equivalent - [Recommended].

Nice to have / Considered a plus:

• ITIL Certification or equivalent qualification (Foundational knowledge in IT service management);
• Familiarity with SIEM tuning and rule optimization;
• Exposure to
  - based logging and hybrid environments;
• Knowledge of security frameworks and compliance standards (e. g. , ISO 27001, NIST);
• Familiarity with automation tools and CI/CD pipelines.

Qualifications:

• Bachelor’s or Master’s degree in IT, Business, or relevant field;
• Exposure to Agile (Scrum, Kanban) and SDLC tools like Jira and Confluence;
• Knowledge of performance tuning and integration techniques;
• Knowledge of English, both written and verbal.

What we Offer:

• Long-term contract;
• Competitive package including private health insurance, life insurance and meal allowance (pay by meal card);
• Bonuses and benefits depending on performance;
• Schooling allowance and pension scheme;
• Incredible and unique annual company events;
• Opportunity to work on an international project and be part of multicultural and multidisciplinary team;
• Solid performance evaluation and career management methodologies;
• Continuous training – technical and behavioural development.