{"id":2924500,"url":"https://alion.io/job/claranet-portugal-siem-engineer","title":"SIEM Engineer","company":{"id":2134470,"name":"Claranet Portugal","domain":"claranet.pt","url":"https://alion.io/company/claranet-pt","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"A","score":88,"open_postings":10,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":48,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lisbon, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":101000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Docker","optional":false},{"name":"Graylog","optional":false},{"name":"Linux","optional":false},{"name":"Logstash","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Podman","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-25T08:20:52Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"We're fast learners, hard workers, natural collaborators... and we Make Modern Happen! \nOur ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.\nWe aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.\nIf you share our vision, join us!\nRight now, we are looking for a SIEM Engineer to integrate our internal team, based in Lisbon/ Porto.\nYour responsibilities include: \nDesign, implement, and maintain security monitoring solutions across enterprise environments.\nDevelop, tune, and optimize detection use cases within Microsoft Sentinel and other SIEM platforms.\nEngineer and onboard log sources, ensuring data quality, normalization, and operational reliability.\nCreate, maintain, and improve KQL detection rules, analytics, watchlists, and threat hunting queries.\nAutomate security operations using PowerShell, Bash, Python, Ansible, and other scripting technologies.\nDeploy and manage SIEM infrastructure components, including Graylog, Logstash, Syslog-ng, Docker/Podman, and related services.\nPerform security engineering activities to enhance monitoring coverage and detection capabilities.\nInvestigate and improve security telemetry, reducing false positives while increasing detection accuracy.\nCollaborate with infrastructure, networking, and security teams to integrate new technologies into the monitoring ecosystem.\nDevelop technical documentation, implementation guides, and operational procedures.\nSupport vulnerability management initiatives by improving visibility and security monitoring.\nEnsure security monitoring solutions follow industry best practices and operational standards.\nYou must have: \n5+ years of experience in cybersecurity operations, with a focus on incident response, SIEM management and cybersecurity technical consultancy.\nProven experience administering and engineering Microsoft Sentinel environments.\nStrong experience writing and optimizing KQL queries for detection engineering.\nSolid experience with SIEM technologies such as Microsoft Sentinel and Graylog.\nHands-on knowledge of log collection technologies including Syslog-ng, Logstash, NXLog, Windows Event Forwarding (WEF), and Syslog.\nExperience deploying and maintaining Linux-based security infrastructure.\nStrong scripting and automation skills using PowerShell, Bash, Python, or Ansible.\nFamiliarity with Docker, Podman, and containerized deployments.\nProficiency in English to communicate effectively with technical and executive stakeholders.\nWe value: \nMicrosoft certifications such as SC-200 (Microsoft Security Operations Analyst) or AZ-500 (Azure Security Engineer).\nKnowledge of threat modeling frameworks and detection methodologies like MITRE ATT&CK.\nStrong analytical thinking for telemetry optimization and noise reduction.\nExcellent communication skills to convey complex technical concepts to multi-disciplinary teams.\nA proactive approach to continuous learning and adapting to cloud security tools.\nWe offer: \nRegular professional development;\nCertification paths resources;\nRegular teambuilding programs;\nFriendly workplace.\nWorkplace: Lisbon/Porto - Hybrid\nClaranet: Make Modern Happen!","description_format":"text","description_chars":3332,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Consulting & Digital Transformation","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-20T13:07:19Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.618,"p_room":1,"age_days":16,"expected_fill_days":48,"reasons":["conf:1","stale_co","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/claranet-portugal-siem-engineer","json_url":"https://alion.io/job/claranet-portugal-siem-engineer.json","meta":{"generated_at":"2026-10-25T11:07:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15979,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2134470},"rest":"https://alion.io/mcp/rest/get_company?id=2134470"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclaranet-portugal-siem-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclaranet-portugal-siem-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclaranet-portugal-siem-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/claranet-portugal-siem-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclaranet-portugal-siem-engineer"}]}