CyberSecurity Engineer – Blue Team (SOC & DFIR)

About the role

We are looking for a Blue Team Engineer to expand practical security defense across our infrastructure, network, and user base. The role is rooted in day‑to‑day Security Operations (SOC), DFIR, and Blue Team workflows, including triaging alerts, hardening systems, and owning security incidents.

Key responsibilities

• Handle day‑to‑day SOC tasks, threat monitoring, and alert triage with full autonomy from start to finish.
• Contribute directly to digital forensics and incident response (DFIR) efforts during security events.
• Harden infrastructure, systems, and processes while keeping them practical and easy to use.
• Help design secure solutions at the architecture level and manage identity protocols like SAML and OIDC.
• Assist everyday employees with security questions, offering guidance in a helpful, approachable way.

Required profile

• Practical experience with Security Operations and the day‑to‑day work of SOC, DFIR, and Blue Team environments.
• Proven capability to triage alerts independently and take complete ownership of incidents.
• Clear understanding of networking principles such as TCP/IP, routing, firewalls, and segmentation.
• Hands‑on familiarity with identity protocols including SAML and OIDC.
• Ability to secure environments without disrupting business operations.
• Strong communication skills and patience when supporting non‑cyber‑savvy colleagues.

Required skills

• SOC
• DFIR
• TCP/IP
• Routing
• Firewalls
• Network segmentation
• SAML
• OIDC

What we offer

• A dynamic and collaborative working environment with real impact.
• A competitive salary package aligned with experience.
• Meal allowance and health insurance for employees.
• Shuttle transport service to offices in Leiria, Caldas da Rainha and Ponte de Sor.
• Bonus in line with company policy.
• Access to the Employee Assistance Programme (EAP).