CareerPlanSign in

Senior SecOps Engineer

Lisbon, Lisbon, Portugal🌐 Remote💼 Full-time🗓 2026-08-14 → 2026-09-25

Core

Design and build security operations (SIEM, vulnerability management, incident response) for a regulated payments group, leveraging AI agents for alert triage and enrichment.

Role type

Senior IC SecOps Engineer (AI-assisted)

Builds

Detection and response stack, vulnerability management programme, automated security operations pipelines

Domain

Financial services / Cybersecurity

Deliverable

production ML models | infrastructure

Required skills

SIEM engineering (Elastic/OpenSearch, Wazuh, Splunk), AWS security (GuardDuty, Security Hub, IAM, VPC), vulnerability management lifecycle, Infrastructure as Code (IaaC), AI/LLM agent integration for security, scripting and API automation

Preferred skills

Kubernetes security (admission controllers, Falco), Detection-as-code (Sigma, CI for detections)

Technologies

Elastic/OpenSearch, Wazuh, Splunk, AWS GuardDuty, AWS Security Hub, Falco, Sigma

Responsibilities

Design and operate SIEM architecture and log pipelines; build AI-assisted alert triage and enrichment; manage vulnerability management programme and remediation SLAs; lead security incident response and post-incident reviews; automate security operations via scripting and IaC; provide security engineering consultancy to engineering teams

Seniority

Senior, hands-on IC

Sourced via workable · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.