Cybersecurity Analyst (Blue Team N2) – On-site

About the role

We are looking for a Cybersecurity Analyst (Blue Team N2) to strengthen our security team in Lisbon. The role focuses on incident investigation and response, delivering accurate technical diagnosis and effective mitigation.

Key responsibilities

• Investigate and handle security incidents escalated by the N1 team.
• Perform in-depth technical analysis to identify root causes.
• Execute containment, remediation, and mitigation actions across systems, networks, and security components.
• Monitor and track incidents through to full resolution.
• Create and optimise use cases within SIEM platforms.
• Develop and maintain incident response playbooks (SOAR).
• Document procedures, solutions, and improvements in the knowledge base.
• Contribute to continuous improvement of security processes.

Required profile

• Proven experience in Blue Team roles (N2 or equivalent).
• Strong analytical and troubleshooting skills in a cybersecurity context.
• Ability to work autonomously in incident handling and resolution.
• Proactive mindset with a strong sense of responsibility.
• Good documentation and organisational skills.
• Team‑oriented mindset and collaboration skills.

Required skills

• Hands‑on experience with SIEM (configuration and use‑case creation).
• Experience with SOAR and response automation.
• Security playbook development.
• Familiarity with ticketing and workflow tools (e.g., Remedy).
• Security certifications such as CEH, BTL1 / BTL2, GIAC (nice to have).