Description

I help MSPs and SMEs improve SIEM signal quality and operational reliability reducing alert noise and increasing detection coverage with practical, evidence driven delivery.

I recently transitioned into SIEM platform engineering with production responsibility for IBM QRadar (operations, upgrades/patching, ingestion quality, and tuning) in an enterprise environment.

My background in security operations and incident-driven troubleshooting means I focus on outcomes: stable telemetry, actionable detections, and clear runbooks for responders.

Languages

Portuguese
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

Volkswagen Financial Services Porto
SIEM Engineer
BANKING AND INSURANCE
November 2025 - Today (9 months)
Leça do Bailio, Portugal
Operated and maintained an enterprise IBM QRadar SIEM platform, executing platform upgrades, patching, rule/configuration changes, and controlled maintenance activities to preserve availability, integrity, and performance.
Administered QRadar components and supporting services, ensuring end-to end log ingestion, parsing, normalization, and search performance aligned with operational SLAs.
Managed a large-scale logging estate of approximately 23,000 log sources, driving lifecycle operations: onboarding, tuning, validation, decommissioning, and continuous health-checking to ensure data completeness and fidelity.
Participated in 24/7 on-call rotations, performing incident triage and restoration activities, coordinating escalations, and executing structured troubleshooting to minimize MTTR in a high-availability environment.
Supported the implementation and testing of logging standards, ensuring downstream correlation quality and improving detection engineering outcomes.
SIEM Administration Alert Tuning / False Positive Reduction
Jolera Inc.
Network & Security Team Lead
DIGITAL AND IT
October 2024 - October 2025 (1 year)
Porto, Portugal
Lead and mentor a team of 5+ security engineers to ensure 24/7 threat monitoring and rapid incident response.
Troubleshooting and maintaining security platforms.
Mentored and trained junior security analysts .
Created comprehensive reports on security incidents, findings, and recommendations for senior management, contributing to decision-making processes on security improvements.
Incident Response EDR / XDR Firewall's Windows Security Event Analysis
Jolera Inc.
Network & Security Operator
DIGITAL AND IT
July 2022 - October 2024 (2 years and 3 months)
Porto, Portugal
Work collaboratively with internal and external technical and service teams to create and/or update knowledge base articles.
Leverage expertise in Elastic, Sentinel One, and Azure Sentinel.
Provide timely responses to all incidents, outages, and performance alerts.
Categorize issues for escalation to appropriate technical teams.
Recognize, identify, and prioritize incidents in accordance with customer business requirements, organizational policies, and operational impact.