Purple Team Security Engineer (SIEM & Detection)

About the role

Inetum is seeking a Purple Team Security Engineer to strengthen its Cybersecurity Operations team. The role focuses on developing, evolving, and optimizing the SIEM platform while bridging offensive (Red Team) and defensive (Blue Team) security practices to improve detection and incident response.

Key responsibilities

• Develop, configure, and continuously improve IBM QRadar SIEM by creating and tuning rules, correlations, and use cases.
• Conduct ethical hacking activities in a Red Team context and translate findings into enhanced detection and response capabilities.
• Analyze, investigate, and implement new security technologies and controls to protect clients' critical assets.
• Identify gaps in security architecture and drive continuous improvement of the overall security posture.
• Provide Level 2 SOC support, assisting with incident analysis, correlation, and handling.
• Support client projects from a security consulting perspective, defining security requirements for solutions.
• Collaborate with technical teams, SOC, and stakeholders to ensure operational effectiveness and alignment with best practices.

Required profile

• Minimum 2 years of proven experience in a similar security engineering role.
• Experience with SIEM solutions, preferably IBM QRadar or equivalent.
• Familiarity with Endpoint Detection & Response tools such as CrowdStrike.
• Knowledge of cloud computing security challenges.
• Understanding of detection, response, and threat‑modeling concepts.
• Experience with IP networks, advanced architectures, and integration infrastructures.
• Proficiency in PowerShell and Shell scripting for automation and analysis.
• Administration and troubleshooting experience in Linux and Microsoft Windows Server environments.

Required skills

• IBM QRadar (SIEM)
• Endpoint Detection & Response (e.g., CrowdStrike)
• PowerShell scripting
• Shell scripting
• Linux administration
• Microsoft Windows Server administration
• Kali Linux (offensive security tools)
• Burp Suite
• Kubernetes and containerized environments