Security Engineer (Elastic Stack)

Who are we: Neotalent Conclusion is one of the leading Iberian specialists providing services in Information Technology and Engineering services. As part of the Netherlands-based organization Conclusion, which has an ecosystem of over 25 companies and 3,600 employees, we are focused on increasing the technological capacity of our clients and the digital transformation of their application ecosystems.

We are talent specialists, attracting the best people and combining them with the needs of the most ambitious projects, at the right time. Our success comes from our investments in innovation, our focus on results, and, above all, the guarantee that our people will have happy and rewarding careers.

With over 25 years of solid experience, Neotalent Conclusion has established its presence in key locations, including Lisbon, Porto, and Madrid. The company currently has more than 950 professionals in the different areas in which it operates.

Neotalent, the responsive people.

Find out more about us at

Role Overview:

We are looking for a Security Engineer (Elastic Stack) to join one of our biggest clients, a leading organization operating in a highly secure and technology-driven environment, focused on strengthening its cybersecurity capabilities and continuously improving threat detection, monitoring, and response processes.

If you are looking for an opportunity to work with cutting-edge security technologies, contribute to advanced detection engineering initiatives, and play a key role in securing critical infrastructures, this project is for you.

Join a collaborative team where security, automation, and innovation go hand in hand, and help shape the future of cyber defense through modern DevOps and Elastic Security practices.

Full Remote (Portugal)

What you will do:

Act as the bridge between Security and Infrastructure teams, translating security requirements into clear technical requests for the Elastic platform;

Onboard new log and event sources through Logstash and Elastic Agent/Fleet, ensuring ECS compliance and troubleshooting ingestion issues;

Build, maintain, and automate detection rules, exceptions, and security content using version control and Azure DevOps pipelines;

Perform threat hunting, security event analysis, and Threat Intelligence integrations within Elastic Security / SIEM environments.

What you are like:

Degree in Computer Science, Cybersecurity, Information Security, or a related field;

3 years of professional experience in Security Engineering, Detection Engineering, SOC, or Security Analytics roles;

Strong hands-on experience with Elasticsearch, Kibana, Logstash, Elastic Agent/Fleet, Elastic Endpoint, and Elastic Security (SIEM);

Practical experience with Terraform, Azure DevOps, CI/CD pipelines, Infrastructure as Code, KQL, ECS, and DevOps methodologies;

Knowledge of MITRE ATT&CK, scripting with Python, Threat Hunting, log source onboarding, and Elastic certifications are considered a plus.

Why join us:

Work on challenging projects for big clients;

Learn more about emerging technologies;

Possibility of working remotely;

Design your career plan;

Access to continuous training and certifications;

Evolve through our internal mobility program;

... and much more!