XDR Engineer – Lisbon (Hybrid)

About the Position

ENSURE YOUR FUTURE!

APPLY NOW

Match Profiler is an Information Systems consulting firm, working in the national and international market since 1999. We are empowered with multidisciplinary competences and know-how in IT, which allow us to contribute, optimize and move forward with our clients.

We are currently strengthening the team of one of our clients with the following profile:

XDR Engineer – Lisbon (Hybrid)

Match Profiler is an Information Systems consultancy with over 25 years of experience in the national and international technology market.

We believe in challenging and motivating projects, driven by multidisciplinary and agile teams - and we are looking for those who want to grow with us.

With a close-knit approach, we develop solutions that drive business growth with innovation, trust, and security.

If you aspire to a career that challenges you daily and allows you to make a real impact - this opportunity is for you.

Responsibilities

• Design, configure, manage, and maintain XDR, EDR, NDR, and Secure Web Gateway (SWG) solutions to protect the organization against advanced threats.
• Contribute to SOC capabilities by deploying, integrating, and optimizing security tools and technologies.
• Develop, maintain, and enhance threat hunting playbooks, detection rules, and response procedures.
• Conduct proactive threat hunting to identify potential threats, vulnerabilities, and security incidents.
• Develop and implement detection and response automations.
• Maintain and improve existing playbooks, automations, and integrations.
• Enhance response capabilities by handling and improving SIEM correlation searches and alerts.
• Collaborate closely with SOC analysts to improve incident response times and operational efficiency.
• Provide technical expertise during security incidents and lead technical investigations when required.
• Develop and deliver technical documentation and training for SOC personnel.
• Support continuous improvement initiatives to enhance overall security posture and SOC operations.
• Stay up to date with emerging threats, technologies, and cybersecurity trends.

Requirements

• Hard Skills:
  • Bachelor’s degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, SANS) are a plus.
  • 5+ years of experience in a Security Operations Center (SOC) or Security Engineering environment.
  • Proven hands-on experience with XDR, EDR, NDR, and SWG technologies (e.g., CrowdStrike, SentinelOne, Cortex XDR, Microsoft Defender, Corelight, Suricata IDS, Zeek, Zscaler, Netskope).
  • Experience with Breach Detection Systems (BDS) or Breach and Attack Simulation (BAS) tools is a strong advantage (e.g., Vectra Networks, Darktrace, ExtraHop).
  • Strong understanding of cybersecurity principles, methodologies, tools, and best practices.
  • Experience deploying, configuring, and maintaining SOC solutions.
  • Solid experience developing and fine-tuning detection rules and threat hunting playbooks.
  • Knowledge of SIEM platforms and log analysis.
  • Strong knowledge of Linux systems (especially RHEL-based distributions).
  • Solid understanding of networking principles, protocols, encryption, and common attack vectors.
  • Experience with scripting and automation using languages such as Python, PowerShell, or Bash.
  • Experience with Infrastructure as Code (IaC) tools (e.g., Terraform) and CI/CD tools and practices (e.g., Git, Jenkins).
  • Knowledge of cloud environments, particularly Microsoft Azure.
  • Willingness to participate in on-call rotations and respond to security incidents outside regular business hours.
• Soft Skills:
  • Strong analytical and problem-solving skills, with the ability to work effectively under pressure.
  • Excellent communication skills, capable of explaining complex security topics to both technical and non-technical audiences.
  • Ability to work independently while also collaborating effectively within a fast-paced team environment.
  • Strong organizational skills and the ability to manage multiple tasks or projects simultaneously.
  • Proactive mindset with a passion for continuous learning and threat identification.
  • High sense of ownership and responsibility during incident response and operational activities.

We Offer

• Careful onboarding and close support from day one.
• Continuous feedback aligned with your professional goals.
• An accessible and collaborative team ready to support each individual's journey.
• A close-knit environment where idea sharing and personal development are valued.
• Access to a network of partnerships offering exclusive discounts on health, wellness, travel, culture, gastronomy, leisure, and much more.
• Social events and initiatives that strengthen team spirit.

About the Company

Match Profiler is an Information Systems consultancy with over 25 years of experience in the national and international technology market.

We are empowered with multidisciplinary competences and know-how in IT, which allow us to contribute, optimize, and move forward with our clients.

To apply for this opportunity, simply send your CV to: [email protected]