Job Openings XSOAR Cybersecurity Engineer (Lisbon or Porto)

About the job XSOAR Cybersecurity Engineer (Lisbon or Porto)

Hey, you on that side, can you believe that this ad appears on your screen by chance? Nimber doesn't believe in chance...

And now your spidey senses are tingling? Keep reading...

We are Nimber - we have entered the advanced technology consulting game. Our goal is to set new rules to put the world where it belongs, in people's hearts.

But what does Nimber mean? In mathematics and game theory, they are numbers with special properties of addition and multiplication. And what we really want is to add value to customers' projects.

Right now, we are looking for a XSOAR Cybersecurity Engineer to integrate our internal team, based in Lisbon or Porto.

Your responsibilities include:

  • Design, implement and maintain SOAR use cases and automated playbooks on platforms such as Cortex XSOAR, Microsoft Sentinel and FortiSIEM;
  • Monitor and analyze security alerts from various SIEM platforms, ensuring an effective and timely response;
  • Correlate and investigate logs from multiple sources (e.g., Elastic, Sentinel, FortiSIEM) to identify malicious patterns and potential incidents;
  • Develop automation scripts and integrations to speed up incident response;
  • Continuously optimize SOAR workflows to reduce false positives and improve response efficiency;
  • Document incident response procedures and contribute to the team knowledge base;
  • Accompany and train junior SOC analysts in best practices and automation technologies;
  • Participate in post-incident analysis and contribute to identifying root causes and improving processes.

You must have:

  • Academic degree level 4 or higher in IT, Computer Science, Security or equivalent professional experience;
  • Minimum of 3 years experience in SOC environments or security operations;
  • At least 1 year of practical experience with SOAR platforms;
  • Proficiency in scripting languages: Python, PowerShell or Bash;
  • Good understanding of incident response frameworks, threat detection and security monitoring;
  • Knowledge of and practical experience with: Palo Alto Cortex XSOAR, Microsoft Sentinel and FortiSIEM.

We value:

  • Experience with other automation tools, such as: Elastic Security (Elastic SIEM), Tines, DFLabs IncMan, Siemplify (Chronicle SOAR) and Swimlane;
  • Familiarity with integrations via REST APIs;
  • Knowledge of the MITRE ATT&CK Framework and good technical documentation practices;
  • Relevant certifications, namely: Palo Alto Cortex XSOAR Certified Automation Engineer; Microsoft SC-200: Security Operations Analyst Associate; Fortinet NSE 5 - FortiSIEM; Elastic Certified Analyst; Swimlane Certified SOAR Developer; Tines Automation Specialist.

And what does Nimber expect from you?

  • Be passionate about what you do.
  • That you take the first step using the talent of Accelerated Innovation.
  • That you define the right strategy with the gift of Sensitive Impartiality.
  • That you decide to put into practice the privilege of Shielded Independence daily.

This is our infallible tactic to which we add the rules of the game at Nimber: impartiality, independence, and fairness. All that's missing is you!

Are you ready to win with us?

📩 If you are tired of feeling like just a number, send us your application and come be a Nimber.