Top Cybersecurity Jobs in Portugal

Leads enterprise security architecture strategy and complex cross-functional initiatives involving Zero Trust, IAM, multi-cloud security, network and application segmentation, AI security, data protection, and cyber resiliency. Advises executives and stakeholders on security roadmaps, supplier risks, M&A due diligence, regulatory matters, and vulnerability remediation. Designs and validates security solutions, promotes automation and innovation, and delivers security transformations across a global organization.

Lead the Third-Party Risk Management program and enterprise security risk activities. Define vendor risk strategies, assessment frameworks, monitoring cadences, and security requirements. Maintain risk registers, facilitate risk workshops, support ISO 27001 and SOC 2 audits, improve evidence collection and GRC processes, and assess emerging regulations including DORA, NIS2, and GDPR. The role requires autonomous cross-functional leadership, strong security framework expertise, and mentoring capabilities.

Lead and manage penetration testing, red team, purple team and adversary simulation programs; coordinate with IR/SOC/Threat Intel; define methodologies, reporting, and governance; mentor staff and deliver actionable findings to engineering and executives.

Leads research and client advisory on emerging AI data security and AI ecosystem data management trends. Develops research reports, presentations, briefings, and tailored recommendations for technology executives and product leaders. Analyzes technologies, vendors, markets, and competitive landscapes; builds expert networks; delivers client inquiries and speaking engagements; and collaborates with analysts and service teams to ensure high-quality research. The role requires deep cybersecurity and AI data expertise, strong writing and presentation skills, executive presence, and up to 25% travel.

Lead a regional follow-the-sun DevSecOps pod delivering ASPM integrations and AI-enabled SDLC secure code scanning. Facilitate shift hand-offs, own technical escalations, perform secure code reviews, guide infrastructure architecture, and mentor engineers to maintain 24/7 delivery in regulated enterprise environments.

Build and maintain security controls across on-premise, multi-cloud, and SaaS environments. Manage SIEM, EDR, logging, monitoring, alerting, and threat-intelligence tooling. Develop detection rules and automated response playbooks, support vulnerability remediation, contribute to threat modeling and architecture reviews, and integrate security into the SDLC. Collaborate with engineering, DevOps, and QA teams while evaluating new security tools and techniques.

Lead and scale a global, AI-native Solutions Engineering organisation (~15 people). Set strategy, build playbooks for mid-market and enterprise motions, enable partners, coach leaders, influence product and GTM, and ensure repeatable, production-ready technical outcomes for complex enterprise customers.

Owns ICEYE Portugal’s facility, personnel, information, and supply-chain security programs. Coordinates national and NATO clearance processes, classified-material handling, physical security controls, audits, onboarding and offboarding, incident response, vendor vetting, annual training, and security interfaces with Portuguese and NATO authorities. Partners with company leadership and IT to implement secure-area and cyber controls while maintaining compliance with Portuguese national requirements and global security standards.

Provides cybersecurity advisory and risk expertise across IT and business stakeholders. Reviews security deliverables, interprets requirements, defines security guidelines, evaluates risks, and contributes to cybersecurity projects. Performs in-depth analysis of complex security scenarios across project and operational environments, with emphasis on cloud-based solutions and alignment with corporate security and risk management standards.

Design, implement, and support OT security architectures; perform OT/ICS security projects, audits and assessments; secure IT/OT communications; advise on ICS/SCADA systems and industrial networks; produce documentation, policies, segmentation strategies and architecture reviews; support pre-sales and collaborate with Iberia cybersecurity teams.

Coordinate and support territory CISOs across EMEA: establish SLAs, monitor cyber levels, deploy Cyber/IT risk dashboards, act as SPOC between central and territory teams, organize committees, and assist local TCISOs for regulatory risk governance.

Operate and administer security solutions (SIEM, firewalls, proxies, antivirus, EDR); support IT users; monitor security health and report deviations; recommend improvements to security operations and posture; perform network, endpoint, Windows and Linux administration; report to the IT Security team in Lausanne.

Design and maintain observability architecture and strategy aligned with resilience and DORA compliance. Configure dashboards, SLOs/SLAs, alerts, and custom extensions. Develop automation and scripts (Python), integrate non-native technologies with OpenTelemetry, analyze performance and capacity metrics, and manage Dynatrace resources and licenses.

Lead and deliver enterprise MDM projects (Samsung Knox focus) for B2B clients. Implement, operate, and integrate MDM platforms and mobile security tools, provide mobile architecture consulting, and ensure solutions meet client requirements and security standards.

Drive information security and compliance by developing policies, implementing IT security controls, performing threat monitoring, contributing to risk management, GDPR and business continuity efforts, conducting internal audits, running SAP security review, supporting incident response and disaster recovery, and promoting security awareness across the organization.

Analyze east/west network traffic, identify issues, recommend and drive remediation actions using NSX-T and VRNI. Produce analysis outputs and follow up on remediation to improve network security.

Manage and improve Azure and Microsoft 365 tenants with a security and modern workplace focus. Administer endpoints and identities via Intune and Autopilot, implement Defender and governance controls, coordinate cybersecurity providers, provide technical support, and manage lifecycle of physical assets.

Support implementation of information security standards and governance, perform risk assessments, develop policies and continuity plans, assist audits, and run cyber awareness and continuous improvement initiatives.

Design, analyze, and implement network and data center security projects; respond to incidents and service requests; analyze and remediate vulnerabilities; troubleshoot complex issues and coordinate with vendors; maintain infrastructure documentation and draft operational procedures.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Support the application security program across engineering teams: perform design and architecture reviews, run static and dynamic scans, conduct manual assessments, review external pentest results, advise on SDLC/DevSecOps security, triage bug-bounty reports, and drive process improvements.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement and document technical and operational security controls for cloud and on-prem systems. Build continuous control assurance (audit) tooling, support client security queries and audits, maintain ISMS/BCMS and help achieve certifications like ISO27001, PCI-DSS and SOC 2.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead design and delivery of cloud-native preventative and detective controls, build automation to audit IaC and infrastructure, develop security tooling, perform threat modeling and security reviews, mentor engineering teams, and drive security capability projects across cloud and product platforms.