R0001210 Security Incident Specialist (Open)We’re Nadara. We work harmoniously with the power of nature and the communities around us to power lifetimes to come. We call our approach ‘living energy’.We don’t just produce renewable energy, we live it – recognising our relationship with the people touched by our business and supporting social, educational, cultural, and environmental initiatives that contribute to the development of the communities we work alongside.Discover more about our business here: <a href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnadara.com%2Fabout%2F&amp;data=05%7C02%7Crita.mallozzi%40external.renantis.com%7C0358ac6cb0134d316d9f08dca03051b3%7C38b40df8b1744f1abaf8e2f57646f856%7C0%7C0%7C638561376602575965%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&amp;sdata=R128FRYNL3FP08DBHxNorkOEOXDpwZD2bslYohLfI14%3D&amp;reserved=0">https://nadara.com/about/</a>Nadara is an innovative place to work. We work in a stimulating and challenging environment, where every day we explore the unknown with curiosity, make decisions with quality and take action and deliver with courage. For us diversity is a real value, and we encourage in connecting different perspectives with respect.Discover more about our culture and approach here: <a href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnadara.com%2Fliving-the-company%2F&amp;data=05%7C02%7Crita.mallozzi%40external.renantis.com%7C0358ac6cb0134d316d9f08dca03051b3%7C38b40df8b1744f1abaf8e2f57646f856%7C0%7C0%7C638561376602589148%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&amp;sdata=ZqmeSu1E%2BjQTP2S7avQFH4X22uk7WEkh5PTw%2FoPouBI%3D&amp;reserved=0">https://nadara.com/living-the-company/</a><h2>Job Description Summary:</h2>The Security Incident Specialist is responsible for ensuring robust incident management by investigating and addressing security incidents reported by or assigned to the SOC. This role involves leading incident response efforts, escalating issues to designated owners when necessary, and coordinating the implementation of Azure Security Solutions, including Azure DLP, Defender, and Defender for Cloud. Additionally, the specialist will support the development and refinement of policies and procedures to enhance Security Incident Management and Cybersecurity practices.<h2>Job Description:</h2>The Security Incident Specialist is responsible for ensuring robust incident management by investigating and addressing security incidents reported by or assigned to the SOC. This role involves leading incident response efforts, escalating issues to designated owners when necessary, and coordinating the implementation of Azure Security Solutions, including Azure DLP, Defender, and Defender for Cloud. Additionally, the specialist will support the development and refinement of policies and procedures to enhance Security Incident Management and Cybersecurity practices.Reporting to the Cybersecurity Manager, the Security Incident Specialist is responsible for maintaining, measuring, and improving the overall Incident Management process within the assigned scope, budget, and timeline. Key responsibilities include:<ul><li>Demonstrating familiarity with Microsoft Security Solutions (Defender, Sentinel, Azure, Entra, etc.).</li><li>Implementing Azure Security Solutions to strengthen the organization's security posture and optimize incident handling processes.</li><li>Maintaining and developing the company’s security monitoring systems and ensuring efficient SIEM ingestion (Sentinel).</li><li>Ensuring the proper collection of logs, alerts, and incidents for effective monitoring and response.</li><li>Reviewing and developing analytics and playbooks for incident classification, assignment, and response automation.</li><li>Reporting the status and outcomes of incidents and investigations to company stakeholders.</li><li>Writing clear and comprehensive incident reports, combining logs and evidence, tailored for both C-level executives and technical teams.</li><li>Coordinating the Incident Management process with Vulnerability Management to ensure cohesive security operations.</li><li>Supporting initiatives to enhance secure architectures, reducing the potential threat landscape.</li><li>Aligning the Incident Management process with organizational policies, procedures, and security guidelines.</li></ul>Key RequirementsMaster/Bachelor Degree on cybersecurity or computer science and 3y+ as SOC analyst, or undergraduate and 5y+ as SOC analystExcellent practice on<ul><li>SIEM/SOAR (Sentinel) maintenance and development</li><li>Log collection, analysis and correlation</li><li>Incidents investigations and response</li><li>Malware analysis</li><li>Phishing analysis</li><li>File system checks and memory dump</li><li>Ioc editing and searching</li></ul>Good practice on:<ul><li>Evidence acquisition and retention</li><li>Secops scripting (bash, vbscript, Powershell, python)</li><li>Threat intelligence and OSINT.</li><li>Support the cybersecurity policies and procedures definition (especially Security Incident Management)</li></ul>Eager to learn, curious mind to find threats, discover backdoors, find attack vectors, talented to build and show samples for scratchHighly effective communication skills and be capable of presenting data clearly to various audienceExcellent written and verbal EnglishAbility to work within complex teams and in an international environment.Desirable Requirements Certifications: Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), eCTHP, eCIR, GCIH, SC-200, , AZ-500, AZ-900, Certified CyberDefender (CCD) or similar.Experience in cybersecurity governance, including the development and alignment of policies, frameworks and compliance strategies.What do we offer? <ul><li>A stimulating international environment. You will never get bored! </li></ul><ul><li>People - centric approach. This is our one and only way of thinking! </li></ul><ul><li>Stimulating challenges and growing opportunities </li></ul><ul><li>The possibility to work in a team where people are passionate about their job </li></ul>Location:LisbonaTime Type:Full timeWorker Subtype:Regular

We&rsquo;re Nadara, one of Europe&rsquo;s largest independent power producers.
We own and operate more than 200 renewable energy sites across Europe and the US, producing electricity from wind, solar, waste-to-energy, and biomass.
Every day, we harness the power of nature for good. The most obvious way is by generating dependable renewable energy, but this is just the beginning. We strive to make a deeper impact, seizing the opportunity to live renewable energy in the decisions we make and actions we take, both big and small.
We call our approach &lsquo;living energy&rsquo;. It sees us connecting with people, contributing to communities, and caring for the natural world. Guided by our values of impact, care and connection we work together to make our global and local impact as positive as possible.

Security Incident Specialist

R0001210 Security Incident Specialist (Open)We’re Nadara. We work harmoniously with the power of nature and the communities around us to power lifetimes to come. We call our approach ‘living energy’.We don’t just produce renewable energy, we live it – recognising our relationship with the people touched by our business and supporting social, educational, cultural, and environmental initiatives that contribute to&nbsp;the development of the&nbsp;communities we work alongside.Discover more about our business here:&nbsp;<a href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnadara.com%2Fabout%2F&amp;data=05%7C02%7Crita.mallozzi%40external.renantis.com%7C0358ac6cb0134d316d9f08dca03051b3%7C38b40df8b1744f1abaf8e2f57646f856%7C0%7C0%7C638561376602575965%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&amp;sdata=R128FRYNL3FP08DBHxNorkOEOXDpwZD2bslYohLfI14%3D&amp;reserved=0">https://nadara.com/about/</a>Nadara is an innovative place to work. We work in a stimulating and challenging environment, where every day we explore the unknown with curiosity, make decisions with quality and take action and deliver with courage. For us diversity is a real value, and we encourage in connecting different perspectives with respect.Discover more about our culture and approach here:&nbsp;<a href="https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnadara.com%2Fliving-the-company%2F&amp;data=05%7C02%7Crita.mallozzi%40external.renantis.com%7C0358ac6cb0134d316d9f08dca03051b3%7C38b40df8b1744f1abaf8e2f57646f856%7C0%7C0%7C638561376602589148%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&amp;sdata=ZqmeSu1E%2BjQTP2S7avQFH4X22uk7WEkh5PTw%2FoPouBI%3D&amp;reserved=0">https://nadara.com/living-the-company/</a><h2>Job Description Summary:</h2>The Security Incident Specialist is responsible for ensuring robust incident management by investigating and addressing security incidents reported by or assigned to the SOC. This role involves leading incident response efforts, escalating issues to designated owners when necessary, and coordinating the implementation of Azure Security Solutions, including Azure DLP, Defender, and Defender for Cloud. Additionally, the specialist will support the development and refinement of policies and procedures to enhance Security Incident Management and Cybersecurity practices.<h2>Job Description:</h2>The Security Incident Specialist is responsible for ensuring robust incident management by investigating and addressing security incidents reported by or assigned to the SOC. This role involves leading incident response efforts, escalating issues to designated owners when necessary, and coordinating the implementation of Azure Security Solutions, including Azure DLP, Defender, and Defender for Cloud. Additionally, the specialist will support the development and refinement of policies and procedures to enhance Security Incident Management and Cybersecurity practices.Reporting to the Cybersecurity Manager, the Security Incident Specialist is responsible for maintaining, measuring, and improving the overall Incident Management process within the assigned scope, budget, and timeline. Key responsibilities include:<ul><li>Demonstrating familiarity with Microsoft Security Solutions (Defender, Sentinel, Azure, Entra, etc.).</li><li>Implementing Azure Security Solutions to strengthen the organization's security posture and optimize incident handling processes.</li><li>Maintaining and developing the company’s security monitoring systems and ensuring efficient SIEM ingestion (Sentinel).</li><li>Ensuring the proper collection of logs, alerts, and incidents for effective monitoring and response.</li><li>Reviewing and developing analytics and playbooks for incident classification, assignment, and response automation.</li><li>Reporting the status and outcomes of incidents and investigations to company stakeholders.</li><li>Writing clear and comprehensive incident reports, combining logs and evidence, tailored for both C-level executives and technical teams.</li><li>Coordinating the Incident Management process with Vulnerability Management to ensure cohesive security operations.</li><li>Supporting initiatives to enhance secure architectures, reducing the potential threat landscape.</li><li>Aligning the Incident Management process with organizational policies, procedures, and security guidelines.</li></ul>Key RequirementsMaster/Bachelor Degree on cybersecurity or computer science and 3y+ as SOC analyst, or undergraduate and 5y+ as SOC analystExcellent practice on<ul><li>SIEM/SOAR (Sentinel) maintenance and development</li><li>Log collection, analysis and correlation</li><li>Incidents investigations and response</li><li>Malware analysis</li><li>Phishing analysis</li><li>File system checks and memory dump</li><li>Ioc editing and searching</li></ul>Good practice on:<ul><li>Evidence acquisition and retention</li><li>Secops scripting (bash, vbscript, Powershell, python)</li><li>Threat intelligence and OSINT.</li><li>Support the cybersecurity policies and procedures definition (especially Security Incident Management)</li></ul>Eager to learn, curious mind to find threats, discover backdoors, find attack vectors, talented to build and show samples for scratchHighly effective communication skills and be capable of presenting data clearly to various audienceExcellent written and verbal EnglishAbility to work within complex teams and in an international environment.Desirable Requirements&nbsp;Certifications: Blue Team Level 1 (BTL1), Blue Team Level 2 (BTL2), eCTHP, eCIR, GCIH, SC-200, , AZ-500, AZ-900, Certified CyberDefender (CCD) or similar.Experience in cybersecurity governance, including the development and alignment of policies, frameworks and compliance strategies.What do we offer?&nbsp;<ul><li>A stimulating international environment. You will never get bored!&nbsp;</li></ul><ul><li>People - centric approach. This is our one and only way of thinking!&nbsp;</li></ul><ul><li>Stimulating challenges and growing opportunities&nbsp;</li></ul><ul><li>The possibility to work in a team where people are passionate about their job&nbsp;</li></ul>Location:LisbonaTime Type:Full timeWorker Subtype:Regular

Security Incident Specialist

About the Job

About the Company

Nadara

Similar Jobs

Senior Vehicle Systems and Software Security Engineer

Senior Vehicle Systems and Software Security Engineer

Enterprise Information Security Architect

Enterprise Information Security Architect

IT Security Detection Engineer

IT Security Detection Engineer

Cybersecurity Engineer

Cybersecurity Engineer

Information Security Analyst

Information Security Analyst

Cyber Security Engineer

Cyber Security Engineer

Sr. Specialist, Security Engineer

Sr. Specialist, Security Engineer

Senior Security Architect

Senior Security Architect

Manager, IT Security

Manager, IT Security

IT Security analyst

IT Security analyst