Security Operations Center (SOC) Engineers
Porto - Portugal
Planet
Tax free shopping for everyone. You can shop tax free in over 30 countries across Europe, Asia and the UAE. Discover how to shop tax free with Planet.About Us:
Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.
In recent years, we have experienced significant growth, expanding our services and global presence.
With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.
Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.
Role Overview
As a SOC Engineer you will be working alongside the SOC team and our MSSP Partner to help support, maintain, and mature the security controls and capability of the SOC.
What you will do:
- Become a SME for the controls used to deliver the detection and response capabilities within the SOC with a automation first mindset.
- Work with the SOC to tune, configure, and overall improve the tooling used to increase logic quality and align the configuration to the business environment to balance security and functionality.
- Use threat intelligence to improve and align capabilities to relevant threats.
- Assist senior team members in process creation, refinement, and testing.
- Transform lessons learned into new detection rules, configuration changes, or new security control to help improve security posture post incident.
- Work with our MSSP and service owners to ensure proper onboarding of all log sources into the SIEM solution.
- Work with various teams to assist and advice on onboarding and troubleshooting of security controls
- Collaborate with internal and external stakeholders to establish, maintain, and continuously improve monitoring, alerting, and reporting.
- Produce reporting and dashboards where required to inform management of visibility and performance of security controls
Who you are:
- Relevant industry certifications in cloud security, SIEM, networking, or security engineering (e.g., Azure, Splunk, AWS, GCP, BTL1, BTL2, Sec+, Cysa+)
- Hands-on experience configuring and troubleshooting EDR solutions (e.g., Microsoft Defender, SentinelOne).
- Proficiency in SIEM tuning, log ingestion, and detection engineering.
- Understanding of cloud environments (Azure, AWS, GCP) and their security controls.
- Experience deploying, maintaining, and enhancing security controls in the cloud.
- Familiarity with cloud-native security tools and threat detection methodologies.
- Experience automating workloads in cloud environments using low-code/no-code solutions or scripting (e.g., Python, PowerShell, Logic App).
- Ability to read, understand, and modify scripts to improve security workflows.
- Strong grasp of Windows, Linux, and networking fundamentals.
- Understanding of firewalls, proxies, IDS/IPS, and endpoint security.
- Comfortable working independently, including during solo shifts.
- Strong analytical and problem-solving skills with a proactive approach to security control improvements.
Why Planet :
Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.
Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. We would love to hear from you – Apply now.
At Planet, we embrace a hybrid work model, with three days a week in the office.
Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Automation AWS Azure Cloud EDR Endpoint security Firewalls GCP IDS IPS Linux Monitoring PowerShell Python Scripting SIEM SOC Splunk Threat detection Threat intelligence Windows
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.