Top Cybersecurity Jobs in Portugal

Design, implement, and maintain distributed software systems supporting Cloudflare’s application security products, including Rate Limiting and Web Application Firewall. Participate across the software development lifecycle, write automated tests, monitor production deployments, debug complex systems, review code, collaborate with security and infrastructure teams, and mentor colleagues. The role involves Rust and Go development, databases, Docker, Kubernetes, and maintaining reliable, fault-tolerant systems at scale, with possible on-call responsibilities.

Provide premium technical support to sophisticated customers experiencing network and application attacks. Analyze traffic signatures, packet captures, protocols, and malicious activity across OSI Layers 3, 4, and 7. Advise on and apply DDoS, firewall, WAF, rate-limiting, blocklisting, and allowlisting mitigations using Cloudflare products. Troubleshoot networking, DNS, SSL/TLS, HTTP, BGP, and GRE issues while collaborating with Engineering, Operations, and Product teams to improve security tools.

Evaluate and improve application security architecture, processes, tools, and documentation. Conduct security design reviews, code reviews, threat modeling, and security testing for applications, AI systems, LLM applications, and AI agents. Identify vulnerabilities and architecture gaps, collaborate with development and product teams on remediation, implement security best practices, and assist with security incident response.

Own a financial product vertical end to end, including strategy, metrics, roadmap, technical design, delivery, and launch. Partner with engineering on APIs, data flows, ledgering, reconciliation, reliability, security, and scalability. Embed regulatory requirements across KYC, transaction monitoring, limits, privacy, and licensing. Apply AI and LLMs with evaluation, safeguards, human oversight, and failure handling while coordinating Engineering, Design, Compliance, Operations, Treasury, and Finance.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; write production code; lead architecture decisions; resolve complex engineering problems; improve testing, security, observability, and development practices; and mentor engineers across teams.

The Senior Application Security Engineer will design and improve Secure SDLC, integrate security practices, and lead application security reviews across multiple platforms while ensuring fast delivery of secure products.

Owns technical direction and hands-on execution for major products and engineering initiatives. Designs scalable systems across backend, frontend, APIs, databases, and infrastructure; writes code; leads architecture decisions; resolves production issues; improves engineering quality; and mentors engineers across teams. The role requires translating ambiguous product needs into technical plans and delivering complex systems from design through production in a globally distributed environment.

Design, build, and operate security integrations and detections (WAF, RASP, API security, IAST, SCA) across Datadog tracing libraries (.NET/Java focus). Take features from prototype to production, monitor telemetry, debug cross-system issues, shape roadmap, collaborate with product and platform teams, and mentor peers to improve code quality and adoption.

Lead and scale a global, AI-native Solutions Engineering organisation (~15 people). Set strategy, build playbooks for mid-market and enterprise motions, enable partners, coach leaders, influence product and GTM, and ensure repeatable, production-ready technical outcomes for complex enterprise customers.

Lead and scale strategic partner motions (channels, GSIs, ISVs, OEMs, cloud, silicon) to drive joint go-to-market plans, revenue, and market expansion. Build executive relationships, enable partners technically and commercially, establish pipeline governance, and coordinate product, sales, marketing, and engineering to convert partner potential into measurable customer impact.

Serve as a senior network security domain authority to define network engineer personas and workflows, advise product and AI teams, validate agent behaviors across firewall, cloud/SASE, policy management, compliance, vulnerability management, and troubleshooting, and help build realistic enterprise test scenarios.

Lead design and development of low-level Linux instrumentation and runtime security technologies (eBPF) to detect threats and protect cloud-native workloads. Build reusable monitoring for process, file, and network visibility, drive end-to-end feature delivery, establish testing methodologies for reliability and performance, partner cross-functionally, and provide technical leadership and mentoring.

Lead architecture and evolution of large-scale Kubernetes-based platforms. Translate business needs into scalable HLD/LLD solutions, set cloud-native best practices, guide engineering teams, support implementation and production troubleshooting, and improve platform capabilities across CI/CD, observability, and security.

Execute hands-on DevSecOps and application security work across CI/CD pipelines. Build Python automation for SAST, DAST, and SCA security gates, tune vulnerability scanning tools to reduce false positives, deploy hardened baselines and secure coding patterns, and provide code-level remediation guidance to Java and Python development teams.

Execute hands-on DevSecOps and application security work across CI/CD pipelines. Build Python automation for SAST, DAST, and SCA integration, tune vulnerability scanning tools, deploy hardened security baselines, and provide Java and Python teams with code-level remediation guidance. The role also involves vulnerability management, secure coding patterns, and collaboration within a large-scale financial services security program.

Execute hands-on application security and DevSecOps work across CI/CD pipelines, integrating SAST, DAST, and SCA security gates. Tune vulnerability scanning tools, reduce false positives, deploy hardened baselines, and provide code-level remediation guidance to Java and Python development teams. The role also involves automation scripting, secure coding patterns, vulnerability scoring, and collaboration with product development teams.

Execute hands-on DevSecOps and application security work by integrating SAST, DAST, and SCA security gates into CI/CD pipelines, tuning vulnerability scanning tools, deploying hardened baselines, and providing code-level remediation guidance to Java and Python development teams. The role also involves automation scripting, vulnerability scoring frameworks, secure coding patterns, and collaboration with product development teams.

Execute hands-on application security and DevSecOps work across CI/CD pipelines. Integrate SAST, DAST, and SCA security gates using Python, tune vulnerability scanning tools, reduce false positives, deploy hardened baselines, and provide code-level remediation guidance to Java and Python development teams.

Design and execute manual and automated testing for web applications, APIs, and backend services. Build regression, smoke, and critical-path automation suites; validate functional, integration, end-to-end, and non-functional requirements; identify and track defects; verify fixes; and collaborate with engineering, product, and DevOps teams. Use AI-assisted tools for test generation, flaky-test triage, and log analysis while improving QA processes, tooling, coverage, and release quality.

Design, build, operate, and support resilient distributed platform services. Write maintainable code, troubleshoot production issues, improve reliability and observability, and assist internal teams. Participate in on-call rotations and collaborate on platform evolution.

Design, build, and operate distributed, high-volume transactional backend services in Go. Own scope, architecture, correctness guarantees, production behavior, observability, and automated verification. Collaborate across product, infra, and QA while using agent-driven engineering practices.

Designs and implements enterprise security architectures, standards, and controls. Conducts security posture assessments, evaluates third-party risks, ensures regulatory and internal compliance, and validates secure technology deployments. Partners with IT and business stakeholders as a security advisor, produces technical documentation and presentations, and recommends improvements across network, identity, cloud, endpoint, and infrastructure security. Monitors emerging threats and vulnerabilities while supporting continuous security improvement.

Lead Constructor's end-to-end security program: manage compliance (SOC 2, ISO 27001), incident response, risk and access governance, vendor security, DLP, AI governance, security exercises, and customer-facing security communications while partnering with platform engineering on cloud and container security.

Designs and maintains network automation across multi-vendor environments, automating provisioning, configuration, monitoring, validation, remediation, and change management. Builds Python and Ansible workflows, templates, modules, inventories, and CI/CD pipelines. Supports data center networking using VXLAN-EVPN and Layer 2/Layer 3 technologies, integrates security and monitoring platforms, analyzes network performance, and collaborates with infrastructure and security teams. Requires strong networking, Linux, automation, observability, version-control, testing, and documentation skills.

Patrols public parks to preserve order, prevent vandalism, and enforce park rules. Provides information to visitors, inspects facilities, reports hazards, issues citations, assists police with arrests, checks permits, provides aid, prepares investigation and patrol reports, testifies in court, and supports park maintenance activities. Requires shift work across a seven-day operation and may involve operating county vehicles.