Top Cybersecurity Jobs in Portugal

Design, develop, review, deploy, and maintain security-focused distributed systems operating at internet scale. Participate in on-call rotations, monitor emerging web application security risks, contribute to product roadmaps, collaborate cross-functionally, and mentor other engineers through technical guidance and knowledge sharing.

Leads multiple engineering teams delivering customer-facing cybersecurity products. Sets technical direction and strategy, partners with Product Management, mentors engineering managers and engineers, establishes performance metrics, manages cross-organizational projects, hires engineering talent, and drives continuous improvement while fostering an empathetic, results-oriented engineering culture.

Own the strategy, roadmap, and lifecycle of Cloudflare’s enterprise Email Security platform. Lead threat detection investments, Zero Trust integration, customer discovery, competitive differentiation, and global launches. Partner with engineering, threat intelligence, sales, and design teams to address email threats such as business email compromise and phishing. Drive product growth, enterprise adoption, and technical platform evangelism while making data-informed investment decisions.

Design, build, and operate Cloudflare application security systems, including rate limiting and web application firewall services. Lead complex technical projects, define scalable architectures, improve reliability, review code and designs, collaborate across engineering teams, and mentor other engineers. The role involves distributed systems, production monitoring, debugging, operational improvements, and occasional on-call support.

Design, implement, and maintain distributed software systems supporting Cloudflare’s application security products, including Rate Limiting and Web Application Firewall. Participate across the software development lifecycle, write automated tests, monitor production deployments, debug complex systems, review code, collaborate with security and infrastructure teams, and mentor colleagues. The role involves Rust and Go development, databases, Docker, Kubernetes, and maintaining reliable, fault-tolerant systems at scale, with possible on-call responsibilities.

Lead end-to-end IT infrastructure projects from planning through closure. Coordinate technical teams, suppliers, and stakeholders while managing schedules, budgets, risks, issues, governance, reporting, and quality delivery. The role requires experience in structured IT environments, Waterfall methodologies, infrastructure technologies, and project management tools. Public sector, EasyVista, and PRINCE2, PMP, or ITIL Foundation experience are valued.

Provide premium technical support to sophisticated customers experiencing network and application attacks. Analyze traffic signatures, packet captures, protocols, and malicious activity across OSI Layers 3, 4, and 7. Advise on and apply DDoS, firewall, WAF, rate-limiting, blocklisting, and allowlisting mitigations using Cloudflare products. Troubleshoot networking, DNS, SSL/TLS, HTTP, BGP, and GRE issues while collaborating with Engineering, Operations, and Product teams to improve security tools.

Lead application security initiatives across product engineering and infrastructure teams. Responsibilities include security design, threat modeling, vulnerability assessments, penetration testing, code reviews, privacy and regulatory design reviews, security tooling development, and developer education. The role focuses on securing cloud-native banking products, automating security processes, and improving the organization’s security posture through cross-functional collaboration.

Lead application security efforts across product and infrastructure teams. Responsibilities include security design reviews, threat modeling, vulnerability assessments, penetration testing, code reviews, privacy and regulatory design reviews, security tooling development, and developer education. The role focuses on securing cloud-native, distributed banking applications and improving security posture through strategic cross-functional collaboration.

Protect Thought Machine’s cloud banking products by designing application security controls, conducting threat modeling, vulnerability assessments, penetration testing, code reviews, and security design reviews. The role collaborates with development and infrastructure teams, automates security tooling, advises on privacy and regulatory requirements, and mentors engineers throughout the software development lifecycle.

Designs and implements technical and operational security controls for cloud and on-premises environments. The role includes automating continuous control assurance, supporting ISO 27001, ISO 22301, PCI DSS, and SOC 2 certifications, conducting threat and risk assessments, maintaining security and business continuity management systems, and explaining security approaches to clients and auditors.

Design and implement technical and operational security controls for cloud and distributed systems. Automate control assurance, support certifications including ISO 27001, ISO 22301, PCI-DSS, and SOC 2, conduct threat and risk assessments, maintain security and business continuity management systems, and communicate security solutions to clients, auditors, and internal stakeholders.

Evaluate and improve application security architecture, processes, tools, and documentation. Conduct security design reviews, code reviews, threat modeling, and security testing for applications, AI systems, LLM applications, and AI agents. Identify vulnerabilities and architecture gaps, collaborate with development and product teams on remediation, implement security best practices, and assist with security incident response.

Own a financial product vertical end to end, including strategy, metrics, roadmap, technical design, delivery, and launch. Partner with engineering on APIs, data flows, ledgering, reconciliation, reliability, security, and scalability. Embed regulatory requirements across KYC, transaction monitoring, limits, privacy, and licensing. Apply AI and LLMs with evaluation, safeguards, human oversight, and failure handling while coordinating Engineering, Design, Compliance, Operations, Treasury, and Finance.

Operate and improve endpoint security, Microsoft 365, Entra ID, Intune, JAMF, vulnerability management, SIEM monitoring, and internal IT services. Responsibilities include alert triage, incident response, access governance, device compliance, remediation tracking, service workflow improvement, automation, secure AI enablement, vendor coordination, documentation, and operational reporting. The role also provides deputy coverage for the CISO and drives cost reduction, standardization, and continuous improvement across IT and security operations.

Own the technical sales cycle from demonstrations and proof-of-concept engagements through technical close. Partner with Sales, Product, and Engineering to develop deal strategies, deliver tailored technical presentations, understand customer security workflows, recommend architectures, address objections, and communicate business value. Represent the company at customer meetings, events, and conferences while serving as a trusted technical advisor to security and engineering stakeholders.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; write production code; lead architecture decisions; resolve complex engineering problems; improve testing, security, observability, and development practices; and mentor engineers across teams.

Leads global SAP S/4HANA security and authorization for a cloud ERP environment. Responsibilities include designing business and role templates, managing role lifecycles, enforcing baseline security and segregation of duties, coordinating provisioning and account lifecycle processes, supporting audits and compliance, and evaluating SAP Public Cloud releases. The role also supports global rollouts, governance documentation, and authorization automation across international operations.

The Senior Application Security Engineer will design and improve Secure SDLC, integrate security practices, and lead application security reviews across multiple platforms while ensuring fast delivery of secure products.

Owns technical direction and hands-on execution for major products and engineering initiatives. Designs scalable systems across backend, frontend, APIs, databases, and infrastructure; writes code; leads architecture decisions; resolves production issues; improves engineering quality; and mentors engineers across teams. The role requires translating ambiguous product needs into technical plans and delivering complex systems from design through production in a globally distributed environment.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Designs, implements, and supports global enterprise network and security infrastructures across data centers, campuses, branches, and cloud environments. Responsibilities include Palo Alto firewall and Prisma solutions, SD-WAN, BGP routing, Cisco LAN and wireless networking, security assessments, incident escalation, architecture reviews, documentation, technical leadership, and mentoring. The role also supports network transformation, high availability, compliance, change management, and complex troubleshooting.

Generates qualified enterprise pipeline across EMEA through cold calling, multichannel outreach, lead qualification, and meeting scheduling. Manages complex multinational accounts, tailors messaging to regional markets, and partners with field sales and channel partners. Uses Salesforce and AI tools for account research, outreach, CRM management, and call summaries. Supports field events, contributes effective outbound playbooks, and mentors newer BDRs. Occasional travel within EMEA is required.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, access reviews, and joiner/mover/leaver processes; monitor alerts and investigate incidents; support Vanta evidence collection for SOC 2, ISO 27001, and ISO 42001; assist with vendor and customer security questionnaires; and provide practical desktop and device support.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.