Cybersecurity Engineer - Porto or Fundão - 04/11/25

Local ( distrito, região): Porto or Fundão

Função: Cybersecurity Engineer

Nível: SR

Data de início: Imediato

Duração da contratação: 1 ano

Inglês B2/C1

Descritivo de requisitos

Master’s degree in Computer Science, Information Security, or a related field.

5+ years of hands‑on experience in cybersecurity, with exposure to both strategy and execution.

Solid understanding of cloud infrastructure security (preferably AWS).

Strong knowledge of identity and access management, vulnerability management, and endpoint protection.

Familiarity with secure software development and Dev
Sec
Ops principles.

Ability to assess risk, prioritize work, and implement pragmatic solutions.

Experience with common security tooling (SIEMs, EDR, secrets management, SAST/DAST, etc. ).

Clear communication skills. You can explain security concepts to both technical and non‑technical audiences.

Proactive, resourceful mindset. You’re comfortable building from scratch and making decisions with limited guidance.

Main Tasks

• Definition of a cyber security strategy in software development.
• Setup processes to build in security during the development stages of products.
• Build in security in software development will also include:
• Contributing to the definition, implementation, and continuous improvement of the organization’s IT security practices.
• Developing and enforce security IT security policies, standards, and procedures.
• Conducting security assessments of internal and external applications, identifying risks and recommending mitigation strategies.
• Designing, implementing, and maintaining secure Dev
  Sec
  Ops practices.
• Creating strategy and support in security testing, code reviews, and validation of technical requirements.
• Assisting in the implementation and maintenance of security controls across the software development lifecycle and cloud infrastructure, including the preparation of technical documentation, such as compliance reports and security architecture artifacts.
• Supporting the technical risk management process through vulnerability assessments, threat modeling, and mitigation planning.
• Creating and implement security awareness and training initiatives focused on secure software development and application security best practices.