Top Cybersecurity Jobs in Portugal

Coordinate and support territory CISOs across EMEA: establish SLAs, monitor cyber levels, deploy Cyber/IT risk dashboards, act as SPOC between central and territory teams, organize committees, and assist local TCISOs for regulatory risk governance.

Operate and administer security solutions (SIEM, firewalls, proxies, antivirus, EDR); support IT users; monitor security health and report deviations; recommend improvements to security operations and posture; perform network, endpoint, Windows and Linux administration; report to the IT Security team in Lausanne.

Design and maintain observability architecture and strategy aligned with resilience and DORA compliance. Configure dashboards, SLOs/SLAs, alerts, and custom extensions. Develop automation and scripts (Python), integrate non-native technologies with OpenTelemetry, analyze performance and capacity metrics, and manage Dynatrace resources and licenses.

Lead and deliver enterprise MDM projects (Samsung Knox focus) for B2B clients. Implement, operate, and integrate MDM platforms and mobile security tools, provide mobile architecture consulting, and ensure solutions meet client requirements and security standards.

Analyze east/west network traffic, identify issues, recommend and drive remediation actions using NSX-T and VRNI. Produce analysis outputs and follow up on remediation to improve network security.

Support implementation of information security standards and governance, perform risk assessments, develop policies and continuity plans, assist audits, and run cyber awareness and continuous improvement initiatives.

Lead and grow a senior Application Security engineering team; define AppSec strategy and roadmap; engage deeply on threat modelling, security architecture, agentic/AI-native tooling, SAST/SCA, vulnerability management and automation; embed security into the SDLC, coordinate with leadership and partner teams, and represent AppSec externally for compliance and customer interactions.

Support the application security program across engineering teams: perform design and architecture reviews, run static and dynamic scans, conduct manual assessments, review external pentest results, advise on SDLC/DevSecOps security, triage bug-bounty reports, and drive process improvements.

Embed application security across a large cloud-native, microservices fintech platform: design secure architectures, run threat modeling, integrate SAST/DAST and dependency/secrets scanning into CI/CD, manage vulnerability lifecycle, support pentests and bug bounties, and improve secure coding and AppSec maturity.

Lead application security initiatives across the SDLC for an AI-powered low-code platform: threat modeling, assessments, remediation, automation of security tooling, reduce recurring vulnerabilities, mentor juniors, and embed secure-by-default patterns to enable faster, safer engineering.

Lead platform security for London Market, embedding secure-by-design across squads. Design, automate, and operate security controls in cloud and on-prem platforms, drive AppSec and vulnerability management, influence architecture, support incident response, and mentor chapter members to raise DevOps and security maturity.

Define and execute the product roadmap for AI-driven blockchain security monitoring tools. Collaborate with cross-functional teams, analyze market and customer feedback, deliver features on time, and communicate with stakeholders to align expectations and improve product offerings.

Lead identification, mitigation, and prevention of security risks across teams. Architect and manage security solutions, enforce policies, perform penetration testing and purple teaming, monitor and respond to incidents, build automation and security frameworks, and collaborate on secure design and DevSecOps practices for a decentralized exchange.

Drive adoption of DevSecOps and application security across global product teams by integrating CI/CD security controls, performing security design reviews and assessments, supporting cloud-native and containerized architectures (Azure/AWS, Kubernetes), automating security checks (Python), and advancing AI/ML security practices. Act as security consultant to engineering teams, triage findings, track remediation, and promote shift-left secure-by-design practices.

Design, implement, and improve cloud security and DevSecOps controls across cloud providers. Support teams with security guidance, review IaC, enable governance, build KPIs/dashboards, and mitigate data exfiltration risks.

Own and evolve cloud infrastructure across AWS/GCP/Azure, build CI/CD and containerized deployments, design multi-tenant environments, implement monitoring and IaC (Terraform/Ansible), lead data protection and threat detection, and support compliance and security audits.

Design, implement and maintain data security architecture and controls across the enterprise Digital Workspace. Lead PQC readiness, PKI and key management efforts, support audits and compliance, evaluate security technologies, advise stakeholders, collaborate with architects and vendors, and produce architecture documentation and strategic plans.

Act as security liaison between product teams and Group Cyber Resilience, ensuring Unified Commerce and Client Care platforms meet security standards. Coordinate security testing, vulnerability remediation, CI/CD security automation, hardening, audits, incident processes, and training across global, cross-functional teams. Provide guidance on secure design without directly implementing solutions.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Provide strategic procurement and contract advice across major public and private projects, lead end-to-end procurement processes, support post-contract management under NEC4, develop procurement services and supply-chain intelligence, contribute to business development, and mentor/manage teams while supporting CIPS/MCIPS accreditation.

Lead IT security and operations to identify and remediate vulnerabilities, ensure ISO 27001 and SOC2 compliance, manage software, hardware and infrastructure, develop IT policies and SLAs, and build a high-performing IT department that delivers secure, reliable support across the business.

Design, build, and operate Threat Protection and ShadowAI services: scalable distributed systems and APIs that detect and control risky web and generative AI usage. Own features end-to-end, maintain availability and latency SLOs, write tests, perform code reviews, use AI-assisted tools, and collaborate with cross-functional teams to improve detection accuracy and production reliability.

Own a UK region and build a pipeline of strategic, high-value accounts. Execute consultative account plans from prospecting through close, engage CISOs and security leaders, deliver outcome-based demos with Solutions Engineers, collaborate with partners and internal teams, accurately forecast revenue, and contribute go-to-market feedback.

Design, build, and operate multi-region VM and Kubernetes infrastructure on GCP and AWS. Lead IaC standards with Terraform/Spacelift, implement observability (Grafana/Prometheus/OTel), manage core platform services (DNS, certs, ingress, service mesh), drive automation and CI/CD, mentor engineers, and participate in 24x7 on-call incident response and post-incident reviews.