Blue Team Coordinator
At a glance
Mid-level Security Operations & Analysis role at Inetum. Remote, Portugal · full-time.
Pay not stated Security Operations & Analysis salary
remoteroles summary, based on the employer's posting.
What you'll do
- Guide monitoring, threat detection and incident response across the defensive security team
- Develop team members through coaching and shared learning practices
- Run SIEM operations across the named platforms and oversee EDR, SOAR, firewalls and IDS/IPS
- Maintain playbooks, policies and performance measures, using results to improve processes
- Take part in critical investigations, analyze technical findings and make decisions alongside the team
What you bring
- More than six years of technical Blue Team work, plus experience managing SOC or operations teams
- You understand security architecture, incident handling, threat hunting and security automation
- You have used ticketing and workflow systems such as Remedy; relevant security or service-management certifications are listed
Who this fits
This hybrid role in Picoas, Lisboa suits a hands-on security lead who can manage operations and contribute directly to investigations. It combines team development with technical work and ongoing process improvement.
From the employer
Inetum is a European leader in digital services. Inetum’s team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good.
Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility.
Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023.
We are looking for a Blue Team Coordinator to lead and work closely with the cybersecurity team in defensive operations, ensuring the effectiveness of security processes and the continuous improvement of the organization's security posture.
Key Responsibilities:
- Lead the team in monitoring, detection, and response to security incidents.
- Inspire, guide, and develop team members, fostering a collaborative and continuous learning environment.
- Oversee operations in SIEMs such as Rapid7/InsightIDR, QRadar, FortiSIEM, and Microsoft Sentinel, as well as security tools like EDR, SOAR, Firewalls, IDS/IPS.
- Define and review playbooks, policies, and performance metrics, ensuring ongoing process improvement.
- Directly support critical investigations, conducting technical analysis and strategic decision-making alongside the team.
- Solid experience in Blue Team, with more than 6 years of technical expertise, as well as experience in managing SOC/operations teams.
- A hands‑on leader who drives results and leads by example. Focused on continuous improvement and outcome‑oriented performance (SLA’s, KPI’s).
- Strong knowledge of security architecture, incident response, threat hunting, and security automation.
- Experience with ticketing and workflow solutions, such as Remedy.
- Relevant certifications such as ITIL, ISO27001, CEH, BTL1, CompTIA Security+.
- Strong leadership and communication skills in multidisciplinary environments.
- Strategic mindset and results-oriented.
- Proactive, collaborative, and committed to continuous improvement.
- Workplace type: Hybrid.
- Location: Picoas, Lisboa.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.