Top Cybersecurity Jobs in Portugal

Lead application security across product engineering, infrastructure, and software development. Responsibilities include security architecture, threat modeling, design reviews, vulnerability assessments, penetration testing, code reviews, privacy and regulatory design, security tooling, and developer education. The role focuses on securing cloud-native, distributed banking systems and improving security posture through strategic planning, automation, and cross-functional collaboration.

Investigate fraud, money laundering, account abuse, cheating, and security threats. Manage transaction queues, review documentation, conduct deep-dive investigations, identify coordinated abuse patterns, collaborate cross-functionally, and report fraud trends. Recommend process and tool enhancements while maintaining strong customer support, regulatory compliance, and platform integrity.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Monitor and investigate security alerts across SIEM, EDR, cloud, network, and endpoint environments. Analyze logs, conduct alert triage, support incident response and remediation, identify root causes, tune detections, reduce false positives, prepare security reports, and improve SOC procedures. The role operates within a global 24/7 Security Operations Centre and requires collaboration with incident response and cybersecurity teams.

Administer and optimize SIEM platforms, develop and tune threat-detection capabilities, manage detection use cases, onboard security data sources, and improve monitoring effectiveness. The role collaborates with threat intelligence and incident response teams, supports cloud security architecture, builds dashboards and metrics, reduces false positives, and maintains SOC procedures and documentation across multiple customer environments.

Owns an end-to-end product area within Menlo Security’s agent runtime security platform. Responsibilities include researching agent security, identity, protocols, and competitors; writing PRDs and acceptance criteria; managing backlogs; partnering with engineering through releases; prototyping with AI tools, MCP clients, and agent runtimes; tracking adoption and success metrics; enabling support and solutions engineering; and supporting customers, sales, marketing, and competitive positioning.

Lead application security initiatives across product engineering and infrastructure teams. Responsibilities include security design, threat modeling, vulnerability assessments, penetration testing, code reviews, privacy and regulatory design reviews, security tooling development, and developer education. The role focuses on securing cloud-native banking products, automating security processes, and improving the organization’s security posture through cross-functional collaboration.

Lead application security efforts across product and infrastructure teams. Responsibilities include security design reviews, threat modeling, vulnerability assessments, penetration testing, code reviews, privacy and regulatory design reviews, security tooling development, and developer education. The role focuses on securing cloud-native, distributed banking applications and improving security posture through strategic cross-functional collaboration.

Protect Thought Machine’s cloud banking products by designing application security controls, conducting threat modeling, vulnerability assessments, penetration testing, code reviews, and security design reviews. The role collaborates with development and infrastructure teams, automates security tooling, advises on privacy and regulatory requirements, and mentors engineers throughout the software development lifecycle.

Designs and implements technical and operational security controls for cloud and on-premises environments. The role includes automating continuous control assurance, supporting ISO 27001, ISO 22301, PCI DSS, and SOC 2 certifications, conducting threat and risk assessments, maintaining security and business continuity management systems, and explaining security approaches to clients and auditors.

Design and implement technical and operational security controls for cloud and distributed systems. Automate control assurance, support certifications including ISO 27001, ISO 22301, PCI-DSS, and SOC 2, conduct threat and risk assessments, maintain security and business continuity management systems, and communicate security solutions to clients, auditors, and internal stakeholders.

Develop and implement security controls across backend systems, investigate incidents and anomalies, triage bug bounty submissions, conduct threat hunting, improve remediation processes, maintain security policies, and support access governance. The role requires hands-on coding, strong PHP knowledge, security awareness, clear communication with nontechnical teams, and ownership across a broad technology stack.

Evaluate and improve application security architecture, processes, tools, and documentation. Conduct security design reviews, code reviews, threat modeling, and security testing for applications, AI systems, LLM applications, and AI agents. Identify vulnerabilities and architecture gaps, collaborate with development and product teams on remediation, implement security best practices, and assist with security incident response.

Own a financial product vertical end to end, including strategy, metrics, roadmap, technical design, delivery, and launch. Partner with engineering on APIs, data flows, ledgering, reconciliation, reliability, security, and scalability. Embed regulatory requirements across KYC, transaction monitoring, limits, privacy, and licensing. Apply AI and LLMs with evaluation, safeguards, human oversight, and failure handling while coordinating Engineering, Design, Compliance, Operations, Treasury, and Finance.

Own the technical sales cycle from demonstrations and proof-of-concept engagements through technical close. Partner with Sales, Product, and Engineering to develop deal strategies, deliver tailored technical presentations, understand customer security workflows, recommend architectures, address objections, and communicate business value. Represent the company at customer meetings, events, and conferences while serving as a trusted technical advisor to security and engineering stakeholders.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; write production code; lead architecture decisions; resolve complex engineering problems; improve testing, security, observability, and development practices; and mentor engineers across teams.

Owns technical direction and hands-on execution for major products and engineering initiatives. Designs scalable systems across backend, frontend, APIs, databases, and infrastructure; writes code; leads architecture decisions; resolves production issues; improves engineering quality; and mentors engineers across teams. The role requires translating ambiguous product needs into technical plans and delivering complex systems from design through production in a globally distributed environment.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Designs, implements, and supports global enterprise network and security infrastructures across data centers, campuses, branches, and cloud environments. Responsibilities include Palo Alto firewall and Prisma solutions, SD-WAN, BGP routing, Cisco LAN and wireless networking, security assessments, incident escalation, architecture reviews, documentation, technical leadership, and mentoring. The role also supports network transformation, high availability, compliance, change management, and complex troubleshooting.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, access reviews, and joiner/mover/leaver processes; monitor alerts and investigate incidents; support Vanta evidence collection for SOC 2, ISO 27001, and ISO 42001; assist with vendor and customer security questionnaires; and provide practical desktop and device support.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Lead and scale strategic partner motions (channels, GSIs, ISVs, OEMs, cloud, silicon) to drive joint go-to-market plans, revenue, and market expansion. Build executive relationships, enable partners technically and commercially, establish pipeline governance, and coordinate product, sales, marketing, and engineering to convert partner potential into measurable customer impact.

Lead assessments and audits of IT operations to enforce access controls and compliance (GDPR, SOX). Manage IAM and PAM solutions, define access strategy, oversee identity lifecycle, implement RBAC/ABAC, drive continuous improvement, metrics, and reporting across stakeholders.

Lead architecture and evolution of large-scale Kubernetes-based platforms. Translate business needs into scalable HLD/LLD solutions, set cloud-native best practices, guide engineering teams, support implementation and production troubleshooting, and improve platform capabilities across CI/CD, observability, and security.

Design and execute manual and automated testing for web applications, APIs, and backend services. Build regression, smoke, and critical-path automation suites; validate functional, integration, end-to-end, and non-functional requirements; identify and track defects; verify fixes; and collaborate with engineering, product, and DevOps teams. Use AI-assisted tools for test generation, flaky-test triage, and log analysis while improving QA processes, tooling, coverage, and release quality.