Security engineer in cybersecurity platforms

SIBS exists to make what used to be complicated simpler. That is why, today, when we think about a financial transaction, we always consider something that can be done with the simple press of a button or by swiping a card. With more than four decades of existence and a successful history driven by technological innovation and competitiveness, we are an international reference and one of the largest electronic payment processors in Europe and Africa. Among our best-known brands are MULTIBANCO, MB NET and MB WAY.

• Administer, configure and ensure the continuous operation of security platforms, including SIEM, EDR/XDR, IDS/IPS and NDR;
• Ensure the availability, performance, updating and proper operation of cybersecurity platforms;
• Implement and optimize detection rules, event correlation, alerts and security policies;
• Ensure the integration of different log and telemetry sources into monitoring and detection platforms;
• Develop and maintain security use cases, contributing to the continuous improvement of detection capabilities;
• Support SOC and incident response teams in event analysis, threat investigation and resolution of technical problems;
• Manage updates, patches, integrations and configuration changes for security solutions;
• Develop scripts and automations to increase the operational efficiency of platforms;
• Produce technical documentation, reports and performance indicators;
• Collaborate with Infrastructure, Networks, Systems and Security teams in implementing protection and monitoring controls

• Degree in Computer Engineering or an equivalent field;
• Between 6 and 8 years of professional experience in similar roles;
• Experience administering and operating cybersecurity platforms, namely SIEM, EDR/XDR and IDS/IPS;
• Knowledge of solutions such as Microsoft Sentinel, Splunk, ArcSight, Elastic Security, Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne, Suricata, Snort, Zeek or Darktrace;
• Solid knowledge of networks, TCP/IP, DNS, HTTP/HTTPS protocols and systems architecture;
• Experience with Windows and Linux operating systems, including security event and log analysis;
• Knowledge of system integration through APIs, Syslog and other event collection mechanisms;
• Experience with scripting and automation, namely PowerShell or Python;
• Familiarity with security frameworks and best practices, such as MITRE ATT&CK, NIST and ISO 27001
• Будет плюсом: Knowledge of SOAR solutions, Threat Intelligence, Cloud environments (Azure and AWS), and experience with ArcSight and/or Elastic Security are valued

• Opportunity to develop innovative projects with a direct impact on society, in a growing company that has invested in technological innovation for more than 40 years;
• Access to a range of attractive benefits: meal allowance above market averages; insurance package; mobile communications package; access to agreements with various partners, among others;
• Prospects for professional development and growth;
• Excellent working environment.