Clan

Senior Soc Consultant

  • LocationLisboa, Portugal
  • Listed20/10/2026

About the job

Horário: Full-Time

Descrição We are seeking a Senior SOC Analyst (L2/L3), a Senior SOC Engineer and a Threat Intelligence & Threat Hunter Specialist to join a world-class team within a Global Engineering Center of Excellence (TEE). This role is based in Portugal, but focuses on strategic international projects. This is a premier opportunity to lead complex network transformations on a global scale. Apply now!

Responsabilidades

  • To perform L2/L3 triage and advanced analysis of security alerts from SIEM, EDR/XDR, and WAF (Senior SOC Analyst);
  • To architect, deploy, and maintain SIEM platforms and data ingestion pipelines (Senior SOC Engineer);
  • To conduct structured and unstructured threat hunting using behavioral analytics and hypotheses (Threat Intelligence & Hunter Specialist);
  • To handle security incidents including containment, eradication, and recovery for malware and ransomware (Senior SOC Analyst);
  • To track APT groups, malware families, and TTP evolution to develop detection content (Threat Intelligence & Hunter Specialist);
  • To act as an escalation point for junior analysts and support root cause analysis (Senior SOC Analyst);
  • To Implement normalization, parsing, and correlation logic across cloud and on-prem environments (Senior SOC Engineer);
  • To deliver actionable intelligence reports to SOC, DFIR, and leadership stakeholders (Threat Intelligence & Hunter Specialist).

Requisitos

  • Bachelor’s degree (or equivalent) with at least 1 year of experience in similar cybersecurity roles;
  • Experience of 4–5 years in SOC operations (Senior SOC Analyst); 4+ years in security engineering (Senior SOC Engineer); 3+ years in threat intelligence/hunting (Threat Intelligence & Hunter Specialist);
  • Fluency in English (written and spoken) is mandatory for this international environment;
  • Proficiency in Splunk, QRadar, or Microsoft Sentinel (Senior SOC Analyst & Engineer); Expertise in CTI platforms like MISP, OpenCTI, or Anomali (Threat Intelligence & Hunter Specialist);
  • Advanced log analysis and MITRE ATT&CK mapping (Senior SOC Analyst); Scripting in Python, PowerShell, or KQL for automation (Senior SOC Engineer); Malware and phishing analysis using Ghidra or VirusTotal (Threat Intelligence & Hunter Specialist)
  • Knowledge of Windows/Linux, Active Directory, and Cloud Security fundamentals (Senior SOC Analyst & Engineer); Advanced network analysis using Zeek, Suricata, and PCAP review (Threat Intelligence & Hunter Specialist);
  • The ability to exercise independent judgment, discretion, and rigorous risk analysis;
  • Willingness and full availability to travel internationally on short notice.

Job details

Company
Clan
Level
Senior
Contract
Full time
Posted
20 October 2026
Advert site
emprego.sapo.pt

How to apply

Find Best Job fills in and sends this employer's form for you, with your CV and your answers. Create the account and this job goes into your queue.

Free to start: 3 applications, 1 a day. Buy credits and up to 10 go out a day, from US$0.33 an application. See prices