Senior SIEM Security Architect – Splunk & SOAR

Strengthen the foundations of secure banking — architect intelligent SIEM and SOAR solutions that keep critical operations resilient.

Lisbon- or Porto-based opportunity with a hybrid work model, including up to two remote days per week.

As a Senior SIEM Security Architect, you will be working for our client, a leading banking group, supporting a security operations platform that protects critical applications and infrastructure. You will manage production incidents, coordinate technical changes, and drive the continuous improvement of security tooling, automation, and operational processes.

Your main responsibilities:

• Manage and resolve production incidents across Windows and Linux servers.
• Coordinate technical operations, releases, and application lifecycle activities.
• Participate in change management alongside development, systems administration, DBA, and networking teams.
• Maintain accurate technical documentation and monitor applications and infrastructure against SLA requirements.
• Automate and improve operational procedures to increase efficiency and resilience.
• Collaborate with development teams on the architecture of new security applications.
• Support the effective operation and continuous enhancement of SIEM, SOAR, and EDR capabilities.

You're ideal for this role if you have:

• At least 8 years of experience in IT security architecture or application support.
• Strong experience with SIEM tooling, particularly Splunk.
• Practical knowledge of incident response platforms and SOAR automation.
• Experience with EDR tools.
• Expertise in security log collection and the development or implementation of security use cases.
• Experience with cloud security logging across AWS, GCP, or Azure.
• Familiarity with Windows and Linux server environments.
• Strong coordination and collaboration skills across technical teams.

Language Required for the role: Fluent English.

Eligibility for the role: Only candidates with an existing legal right to work in Europe will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.