Top Cybersecurity Jobs in Portugal

Lead application security for cloud-native banking products: perform threat modeling, design reviews, vulnerability assessments, pen-testing, automation of security tooling, and consult across SDLC to protect data and ensure regulatory/privacy compliance.

Lead application security for Thought Machine by performing threat modeling, design reviews, vulnerability assessments, and security testing. Drive product security strategy, tooling selection and automation, advise development teams, and ensure data privacy and regulatory considerations are integrated across the software development lifecycle.

Design, build and maintain cloud-native preventative and detective security controls, develop security tooling and automation, perform threat modelling and security reviews, and mentor engineering teams to maintain secure production infrastructure.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead application security initiatives across the SDLC for an AI-powered low-code platform: threat modeling, assessments, remediation, automation of security tooling, reduce recurring vulnerabilities, mentor juniors, and embed secure-by-default patterns to enable faster, safer engineering.

Lead and execute complex incident response investigations, proactively hunt for threats across on-prem and cloud environments, translate threat intelligence into detection and remediation strategies, improve SIEM/EDR detection coverage, develop response and hunting playbooks, and collaborate with engineering/DevSecOps to automate and harden security operations.

Support the SOC and incident response lifecycle, integrate platforms with SOC, perform threat hunting and threat intelligence improvements, automate alerts/escalations, build custom integrations (Python/Bash) in containerized/cloud environments, and collaborate with Tech, Privacy, and Compliance teams.

Lead enterprise security for a PE-backed carve-out: set strategy, govern ISMS/ISO27001, oversee SOC/IAM, own divestiture security sign-off, lead due diligence, and report to IT leadership and investors.

Lead platform security for London Market, embedding secure-by-design across squads. Design, automate, and operate security controls in cloud and on-prem platforms, drive AppSec and vulnerability management, influence architecture, support incident response, and mentor chapter members to raise DevOps and security maturity.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Provide technical leadership to embed security controls into architecture, lead incident response and log analysis, perform risk assessments and audits, support compliance/certification efforts, coordinate security projects, and drive remediation across systems and services.

Lead assessments and audits of IT operations to enforce access controls and compliance (GDPR, SOX). Manage IAM and PAM solutions, define access strategy, oversee identity lifecycle, implement RBAC/ABAC, drive continuous improvement, metrics, and reporting across stakeholders.

Monitor security alerts, perform initial incident triage and investigations, escalate incidents, analyze logs, use tools like Microsoft Sentinel/MDE/MDI/Wazuh/SASE, document findings, and help improve SOC processes and playbooks.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Drive adoption of DevSecOps and application security across global product teams by integrating CI/CD security controls, performing security design reviews and assessments, supporting cloud-native and containerized architectures (Azure/AWS, Kubernetes), automating security checks (Python), and advancing AI/ML security practices. Act as security consultant to engineering teams, triage findings, track remediation, and promote shift-left secure-by-design practices.

Lead design and deployment of cloud and enterprise security architecture, driving Zero Trust, CASB/SASE/CSPM/CWPP implementations, evaluating tools, performing proofs-of-concept, producing standards and guidance, and integrating security-by-design across Azure/AWS and hybrid environments.

Own and scale Wayflyer’s security program: lead a security team, define strategy, run monitoring, detection and incident response, partner with engineering on cloud and application security, manage third‑party risk, ensure regulatory controls, and report security posture to leadership.

Design, implement, and improve cloud security and DevSecOps controls across cloud providers. Support teams with security guidance, review IaC, enable governance, build KPIs/dashboards, and mitigate data exfiltration risks.

Lead network security architecture for the organization: define standards, design logical architectures, evaluate tools, manage governance, assess risks, advise engineering teams, and report to senior stakeholders. Drive strategic initiatives, vendor integration in a global environment, and ensure adoption of emerging network security technologies and best practices.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Design, implement and maintain data security architecture and controls across the enterprise Digital Workspace. Lead PQC readiness, PKI and key management efforts, support audits and compliance, evaluate security technologies, advise stakeholders, collaborate with architects and vendors, and produce architecture documentation and strategic plans.

Second-in-command for CostaTerra Safety & Security, overseeing security operations, emergency response, safety programs, medical and water rescue, security technologies, investigations, compliance, staff development, and incident command. Ensures operational readiness, contractor management, training, and regulatory compliance while acting as department head in the Director's absence.

Owner of offensive security testing and continuous perimeter monitoring across external domains, IPs, DNS, VPS, and office infrastructure. Conduct adversary emulation against endpoints/EDR/XDR, scoped web/API tests, and document exploitation chains. Translate findings into defensive controls, support Purple Teaming, and improve asset tracking and remediation metrics.

Design and implement secure Linux-based product, network, and server architectures with automation. Lead cloud infrastructure and application deployment projects, support regulatory and product security management, and advise on APIs (REST, MQTT, OPC-UA). Work in a cross-functional team using containerization, CI/CD, and infrastructure-as-code tools.