Top Cybersecurity Jobs in Portugal

Secure SEON’s cloud-based fraud-prevention platform through IAM hardening, infrastructure guardrails, detection engineering, incident response, vulnerability remediation, and threat modeling. Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS assurance programs; automate evidence collection and access reviews; manage customer questionnaires, vendor reviews, policies, risk registers, and regulatory obligations.

Provide premium technical support to sophisticated customers experiencing network and application attacks. Analyze traffic signatures, packet captures, protocols, and malicious activity across OSI Layers 3, 4, and 7. Advise on and apply DDoS, firewall, WAF, rate-limiting, blocklisting, and allowlisting mitigations using Cloudflare products. Troubleshoot networking, DNS, SSL/TLS, HTTP, BGP, and GRE issues while collaborating with Engineering, Operations, and Product teams to improve security tools.

Research and exploit vulnerabilities in LLM applications and autonomous agents. Build attack tooling, agent harnesses, evaluations, benchmarks, and reproducible proofs of concept to improve AI security products. Conduct AI red teaming, offensive security testing, failure analysis, experimental validation, and exploit reporting. Collaborate with research teams and communicate technical findings, risks, tradeoffs, and remediation recommendations to technical and non-technical stakeholders.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Lead end-to-end IT infrastructure projects from planning through closure. Coordinate technical teams, suppliers, and stakeholders while managing schedules, budgets, risks, issues, governance, reporting, and quality delivery. The role requires experience in structured IT environments, Waterfall methodologies, infrastructure technologies, and project management tools. Public sector, EasyVista, and PRINCE2, PMP, or ITIL Foundation experience are valued.

Lead Infovista’s international network, infrastructure, cloud, and DevOps organization. Own the multi-year platform strategy, roadmap, budget, reliability, security, cost optimization, and delivery outcomes. Govern offshore partners, sourcing models, SLAs, and performance while providing technical direction on cloud, Kubernetes, networking, and automation. Partner with executive, product, engineering, and security stakeholders to build scalable platforms supporting SaaS, network intelligence, AI, analytics, and automation initiatives.

Design and build LLM-based autonomous security agents and self-healing remediation pipelines. Integrate AI-driven threat detection into CI/CD and GitOps workflows, automate vulnerability research, patching, and security orchestration across cloud-native infrastructure.

Designs and implements application, cloud, Kubernetes, and development-pipeline security controls. Responsibilities include threat modeling, secure design and code reviews, automated testing, AWS and EKS security, security automation, vulnerability investigation, penetration-test remediation, logging and incident response, and HIPAA/SOC 2 technical controls. The role partners directly with engineering and SRE teams and owns security projects from design through ongoing improvement.

Own application security initiatives across the SDLC, including threat modeling, vulnerability assessment, remediation, security tooling, automation, and secure-by-default patterns. Partner with engineering and platform teams to secure cloud-native, AI-powered systems and agentic capabilities. Communicate risks and recommendations, improve security signal quality, identify process improvements, and mentor junior engineers while independently delivering moderately complex security projects.

Manage day-to-day IT operations for a distributed EMEA workforce. Responsibilities include preparing and deploying equipment, administering user accounts and permissions, handling onboarding and offboarding, configuring software, providing first-level technical support, maintaining IT asset inventories and documentation, coordinating replacements, and working with external IT providers.

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Manage SAP users, roles, and authorizations across ECC, S/4HANA, and Fiori environments. Create and maintain single, composite, and derived roles using SAP security tools. Support Segregation of Duties, SAP audits, compliance, and security best practices while collaborating with technical and functional teams. Valued experience includes Fiori authorizations, SAP GRC Access Control, SAP Cloud Connector, and ECC-to-S/4HANA conversion projects.

Support information security governance, compliance, risk management, and cybersecurity initiatives. Implement and maintain security standards and regulatory frameworks, conduct risk assessments, develop policies and procedures, deliver awareness campaigns, support audits, and advise business and technical stakeholders on security requirements and continuous improvement.

Designs and improves application security safeguards across healthcare applications, APIs, data exchanges, cloud services, and infrastructure. Leads threat modeling, architectural risk reviews, secure SDLC and AIDLC practices, AI security assessments, security pattern development, and risk-based release criteria. Provides guidance on identity, cryptography, secrets, PHI workflows, testing, vulnerability management, supply-chain risk, and remediation strategies while advising distributed engineering and security teams.

Leads global technical information security projects from initiation through closure, coordinating security, infrastructure, networking, application, cloud, and end-user teams. Manages schedules, dependencies, risks, budgets, vendors, change management, enterprise rollouts, adoption, and executive reporting. Supports security integrations for acquired businesses and data security initiatives while maintaining project documentation and portfolio reporting in Jira, Confluence, and ServiceNow.

Analyze east/west network traffic, identify issues, recommend and drive remediation actions using NSX-T and VRNI. Produce analysis outputs and follow up on remediation to improve network security.

Supports cybersecurity compliance across organizational processes and products by identifying compliance gaps, maintaining policies and controls, participating in audits and assessments, preparing evidence, and interpreting cybersecurity requirements. The role also promotes security awareness through training, guidance, knowledge-sharing sessions, and development of awareness content while coordinating with technical teams and stakeholders.

Designs, implements, migrates, and optimizes enterprise security solutions across cloud and on-premises environments. Leads security architecture evolution, complex technology transformation projects, troubleshooting, performance optimization, and infrastructure integrations. Provides technical consultancy, supports cybersecurity initiatives, and ensures solutions align with business and technical requirements. Requires strong network security expertise, Check Point experience, stakeholder management, and the ability to lead complex technical initiatives.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.

The Senior Security Engineer will secure cloud infrastructure, Kubernetes environments, and development lifecycles across AWS and Azure. Responsibilities include vulnerability identification and remediation, security automation, cloud-native architecture, IAM and network security, compliance auditing, incident collaboration, and security tool integration. The role also involves building automated detection and remediation systems, securing AI agents and machine-learning supply chains, mentoring junior engineers, and balancing cloud security with cost optimization.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Deliver cybersecurity platform demonstrations, free trials, technical qualification, and first 60 days of customer onboarding. Lead webinars, workshops, and cyber bootcamps; support customer adoption and migration at scale. Partner with sales, customer operations, product, content, and engineering teams while communicating technical concepts clearly to technical and non-technical audiences.

Administer and develop SAP security, role, and authorization concepts across S/4HANA, Fiori, and ECC environments. Manage SAP Cloud Identity Services, XITING XAMS, user licensing, compliance, and audit requirements. Resolve authorization issues, support transformation projects, advise internal consultants, and provide user support in an international environment.