Cybersecurity Operations Specialist (M/F)

Description

Job Summary: We are seeking a Cybersecurity Operations Specialist to strengthen REN's detection and response capabilities and advance the technical evolution of its Security Operations Center (SOC), protecting critical infrastructure. Key Highlights: 1. Threat Detection and Automation (SIEM/SOAR) 2. Security Operations and Incident Response 3. Operational Collaboration We present an opportunity for a ***Cybersecurity Operations Specialist (M/F)*** within REN's Information Systems Directorate, with the workplace located in **Sacavém.** We seek a professional with a strong technical profile and experience in threat detection, SIEM/SOAR platform management, and continuous improvement of monitoring and incident response capabilities, within a context of high operational criticality and regulatory compliance. Reporting directly to the Head of the Cybersecurity Operations Center, this role will contribute to strengthening REN's detection and response capabilities and to the technical evolution of the SOC, playing an active role in protecting critical infrastructure essential to the country's energy resilience. **Key Responsibilities:** Regarding **Threat Detection and Automation (SIEM/SOAR):** * Management and optimization of SIEM and SOAR platforms; * Development and refinement of detection use cases based on MITRE ATT\&CK; * Creation and maintenance of automated response playbooks and workflows; * Integration of Threat Intelligence and continuous improvement of correlation rules; * Alert analysis and tuning, ensuring log source quality and improving MTTD/MTTR. Regarding **Security Operations and Incident Response:** * Technical support for incident response (analysis, mitigation, and lessons learned); * Production of technical evidence and contribution to internal and regulatory reporting; * Coordination with IT, OT, and operational teams during relevant incidents; * Participation in cybersecurity exercises (Red/Blue/Purple Team, Tabletop, CTF). Regarding **Operational Collaboration:** * Technical coordination with service providers (MSSPs), ensuring service quality and continuous improvement; * Collaboration with Cybersecurity Architecture and Engineering teams and OT specialists. **Professional Profile** * Higher education degree in Computer Engineering or related field; * Minimum 2 years of experience in SOC, CSIRT, or equivalent roles; * Experience operating and optimizing SIEM platforms (e.g., Splunk, Sentinel, QRadar) and SOAR tools; * Knowledge of security technologies (EDR, IDS/IPS, firewalls, proxies, DLP, log management); * Experience with Threat Intelligence and frameworks such as MITRE ATT\&CK; * Forensic analysis knowledge is advantageous; * Experience in regulated environments or the energy sector is advantageous. **Personal Profile** * Strong analytical and problem-solving skills; * Ability to perform under pressure during critical incidents; * Technical autonomy and sense of responsibility; * Strong communication skills with both technical and non-technical teams; * Orientation toward continuous improvement. **Applications may be submitted via REN's website.**