Incident Response Analyst

Location: Hybrid in Lisbon, with office attendance 2 days per week. Candidates must already be based in Portugal and hold Portuguese or EU citizenship or a valid work permit.

Company

Technology consulting company connecting consultants with national and international partners across diverse technology sectors.

What you will do

• Investigate security incidents and analyze security logs.
• Analyze endpoint detection and response data and network traffic.
• Automate security workflows using Python, scripting, APIs, ServiceNow, and SOAR tools.
• Translate complex technical alerts into clear executive reports.
• Make decisions under pressure and provide informal leadership during incident response.

Requirements

• At least 3 years of experience in security incident investigation and log analysis.
• Experience with EDR and network traffic analysis.
• Knowledge of Python, scripting, APIs, and ServiceNow or SOAR.
• Fluency in English, Portuguese, and Spanish at B2 level.
• Availability for hybrid work in Lisbon 2 days per week; candidates must already be based in Portugal and have Portuguese or EU citizenship or a valid work permit.

Culture & Benefits

• Consulting work with access to national and international technology partners.
• Health insurance and a Coverflex meal card.
• Welcome kit, career progression opportunities, and special discounts.
• Career coaching and personalized professional support.