SONAE ARAUCO
Junior Cybersecurity
SONAE ARAUCOPortugal17 days ago
Full-timeEngineering, Information Technology
To reinforce Sonae Arauco’s current Cyber Security team, we are recruiting a Junior Cyber Security Analyst with the following profile:

Responsibilities

  • Analyze and investigate alerts escalated by the SOC: triage, validation, and classification of incidents; determine impact and scope.
  • Correlate events and perform investigations using platforms such as Microsoft Security, EDR/XDR (e.g., CrowdStrike), and network/endpoint logs.
  • Support incident response activities: evidence collection, data preservation, and basic forensic analysis (memory, logs, traffic).
  • Assist in the tuning and maintenance of detection rules in SIEM, EDR, and IDS/IPS; propose improvements to reduce false positives.
  • Collaborate on the development and update of incident response playbooks; implement simple automations.
  • Produce technical investigation reports and status dashboards; prepare communications for stakeholders when required.
  • Participate in post-incident reviews, identifying root causes, mitigation measures, and lessons learned.
  • Work closely with OT/IT teams to ensure that security measures are suitable for industrial environments (network segmentation, IoT/OT asset control).
  • Contribute to the continuous strengthening of the SOC (documentation, detection testing, simulation exercises).

Profile

  • Bachelor’s degree in Cybersecurity, Computer Engineering, Networks, or equivalent areas; or relevant hands-on experience in SOC/security engineering.
  • Proven experience (1–3 years) in Cyber Security teams, preferably in incident response, security monitoring, or security engineering.
  • Knowledge of vulnerability management and patching processes.
  • Familiarity with EDR/XDR tools (e.g., CrowdStrike), SIEM solutions (e.g., Microsoft Sentinel), and detection frameworks (MITRE ATT&CK).
  • Solid understanding of networks, protocols, and log analysis.
  • Basic scripting skills (Python, PowerShell, Bash) for task automation.
  • Experience with rule tuning and integration of security solutions.
  • Experience with cloud environments (Azure, AWS) – valued.
  • Proficiency in Portuguese and English (spoken and written) is essential for technical communication and collaboration with global teams.
  • Valued certifications: CompTIA Security+, CySA+, GCIH, GCIA, Azure Security Engineer (not mandatory).
  • Experience in industrial environments (OT/IoT) or with MSSPs – valued.
  • Analytical, communicative, and proactive profile, with the ability to work under pressure and as part of a team.

Key Skills

Ranked by relevance
Apply