Enhesa - IT Security Engineer

Overview

In this role, you’ll help support our cybersecurity infrastructure by putting strong security controls in place, deploying innovative security solutions, and digging into security incidents when they occur. You’ll play a key part in keeping our security posture strong through careful incident analysis and smart mitigation strategies. You’ll also work closely with different teams across the company, ensuring our security policies and procedures align with business goals and compliance requirements. Staying up to date on the latest cybersecurity trends and threats will be important, and we encourage continuous learning and professional growth. Overall, this role calls for a proactive mindset; anticipating potential vulnerabilities and taking preventive action to stop incidents before they happen.

Core Responsibilities

• Implement and maintain security measures and controls.
• Monitor security systems and analyze potential threats.
• Conduct security assessments and audits.
• Develop and enforce security policies and procedures.
• Participate in incident response activities, including investigation, documentation, and coordination of recovery efforts.

Education Level

Bachelor’s or advanced degree in computer science, artificial intelligence, mathematics, or related field or professional cybersecurity certifications in lieu of a formal degree.

Required Skills

• Knowledge of networks (TCP/IP, LAN/WAN) and a solid understanding of networking basics, including TCP/IP protocols, and the configuration and operation of both Local Area Networks (LAN) and wide Area Networks (WAN).
• Basic familiarity with the OSI model, including the understanding of its seven layers.
• Knowledge of security protocols such as HTTPS, DNS, SMTP, FTP, SSH.
• Familiarity with firewalls, IDS/IPS, and their purposes.
• Understanding of information security principles: confidentiality, integrity, and availability.
• Knowledge about spam and malware filtering systems.
• Understanding of phishing and spear phishing techniques and preventative measures.
• Familiarity with email authentication protocols such as SPF, DKIM, and DMARC.
• Familiarity with operating systems: Windows, Linux, Unix, Mac
  OS.
• Knowledge and familiarity with incident investigation and response processes.
• Programming languages: Python, Power
  Shell.
• Knowledge of securing cloud environments (AWS, Azure, GCP).
• Familiarity with IAM, encryption in transit and at rest, and shared responsibility models.
• Understanding of securing virtual machines and containerized environments.
• Experience with Security Information and Event Management tools such as Sentinel.
• Knowledge of antivirus and EDR solutions.
• Ability to think critically and solve problems under pressure; identify appropriate datasets and drive annotation for machine learning techniques.
• Commitment to continuous learning and skill updating.

Seniority Level

Entry level

Employment Type

Full-time

Job Function

Information Technology

Industries

IT Services and IT Consulting

Location

Lisbon, Portugal