Blue Team Coordinator

Job Description

We are looking for a Blue Team Coordinator to lead and work closely with the cybersecurity team in defensive operations, ensuring the effectiveness of security processes and the continuous improvement of the organization's security posture.

Key Responsibilities:

• Lead the team in monitoring, detection, and response to security incidents.
• Inspire, guide, and develop team members, fostering a collaborative and continuous learning environment.
• Oversee operations in SIEMs such as Rapid7/InsightIDR, QRadar, FortiSIEM, and Microsoft Sentinel, as well as security tools like EDR, SOAR, Firewalls, IDS/IPS.
• Define and review playbooks, policies, and performance metrics, ensuring ongoing process improvement.
• Directly support critical investigations, conducting technical analysis and strategic decision-making alongside the team.

Qualifications

• Solid experience in Blue Team, with more than 6 years of technical expertise, as well as experience in managing SOC/operations teams.
• A hands‑on leader who drives results and leads by example. Focused on continuous improvement and outcome‑oriented performance (SLA’s, KPI’s).
• Strong knowledge of security architecture, incident response, threat hunting, and security automation.
• Experience with ticketing and workflow solutions, such as Remedy.
• Relevant certifications such as ITIL, ISO27001, CEH, BTL1, CompTIA Security+.
• Strong leadership and communication skills in multidisciplinary environments.
• Strategic mindset and results-oriented.
• Proactive, collaborative, and committed to continuous improvement.

Additional Information

• Workplace type: Hybrid.
• Location: Picoas, Lisboa.