Top Cybersecurity Jobs in Lisbon

Provide premium technical support to sophisticated customers experiencing network and application attacks. Analyze traffic signatures, packet captures, protocols, and malicious activity across OSI Layers 3, 4, and 7. Advise on and apply DDoS, firewall, WAF, rate-limiting, blocklisting, and allowlisting mitigations using Cloudflare products. Troubleshoot networking, DNS, SSL/TLS, HTTP, BGP, and GRE issues while collaborating with Engineering, Operations, and Product teams to improve security tools.

Secure SEON’s cloud-based fraud-prevention platform through IAM hardening, infrastructure guardrails, detection engineering, incident response, vulnerability remediation, and threat modeling. Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS assurance programs; automate evidence collection and access reviews; manage customer questionnaires, vendor reviews, policies, risk registers, and regulatory obligations.

Lead end-to-end IT infrastructure projects from planning through closure. Coordinate technical teams, suppliers, and stakeholders while managing schedules, budgets, risks, issues, governance, reporting, and quality delivery. The role requires experience in structured IT environments, Waterfall methodologies, infrastructure technologies, and project management tools. Public sector, EasyVista, and PRINCE2, PMP, or ITIL Foundation experience are valued.

Research and exploit vulnerabilities in LLM applications and autonomous agents. Build attack tooling, agent harnesses, evaluations, benchmarks, and reproducible proofs of concept to improve AI security products. Conduct AI red teaming, offensive security testing, failure analysis, experimental validation, and exploit reporting. Collaborate with research teams and communicate technical findings, risks, tradeoffs, and remediation recommendations to technical and non-technical stakeholders.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Manage SAP users, roles, and authorizations across ECC, S/4HANA, and Fiori environments. Create and maintain single, composite, and derived roles using SAP security tools. Support Segregation of Duties, SAP audits, compliance, and security best practices while collaborating with technical and functional teams. Valued experience includes Fiori authorizations, SAP GRC Access Control, SAP Cloud Connector, and ECC-to-S/4HANA conversion projects.

Support information security governance, compliance, risk management, and cybersecurity initiatives. Implement and maintain security standards and regulatory frameworks, conduct risk assessments, develop policies and procedures, deliver awareness campaigns, support audits, and advise business and technical stakeholders on security requirements and continuous improvement.

Lead Infovista’s international network, infrastructure, cloud, and DevOps organization. Own the multi-year platform strategy, roadmap, budget, reliability, security, cost optimization, and delivery outcomes. Govern offshore partners, sourcing models, SLAs, and performance while providing technical direction on cloud, Kubernetes, networking, and automation. Partner with executive, product, engineering, and security stakeholders to build scalable platforms supporting SaaS, network intelligence, AI, analytics, and automation initiatives.

Analyze east/west network traffic, identify issues, recommend and drive remediation actions using NSX-T and VRNI. Produce analysis outputs and follow up on remediation to improve network security.

Designs, implements, migrates, and optimizes enterprise security solutions across cloud and on-premises environments. Leads security architecture evolution, complex technology transformation projects, troubleshooting, performance optimization, and infrastructure integrations. Provides technical consultancy, supports cybersecurity initiatives, and ensures solutions align with business and technical requirements. Requires strong network security expertise, Check Point experience, stakeholder management, and the ability to lead complex technical initiatives.

Designs and implements application, cloud, Kubernetes, and development-pipeline security controls. Responsibilities include threat modeling, secure design and code reviews, automated testing, AWS and EKS security, security automation, vulnerability investigation, penetration-test remediation, logging and incident response, and HIPAA/SOC 2 technical controls. The role partners directly with engineering and SRE teams and owns security projects from design through ongoing improvement.

Own application security initiatives across the SDLC, including threat modeling, vulnerability assessment, remediation, security tooling, automation, and secure-by-default patterns. Partner with engineering and platform teams to secure cloud-native, AI-powered systems and agentic capabilities. Communicate risks and recommendations, improve security signal quality, identify process improvements, and mentor junior engineers while independently delivering moderately complex security projects.

Administer and develop SAP security, role, and authorization concepts across S/4HANA, Fiori, and ECC environments. Manage SAP Cloud Identity Services, XITING XAMS, user licensing, compliance, and audit requirements. Resolve authorization issues, support transformation projects, advise internal consultants, and provide user support in an international environment.

Manage day-to-day IT operations for a distributed EMEA workforce. Responsibilities include preparing and deploying equipment, administering user accounts and permissions, handling onboarding and offboarding, configuring software, providing first-level technical support, maintaining IT asset inventories and documentation, coordinating replacements, and working with external IT providers.

Design, develop, review, deploy, and maintain security-focused distributed systems operating at internet scale. Participate in on-call rotations, monitor emerging web application security risks, contribute to product roadmaps, collaborate cross-functionally, and mentor other engineers through technical guidance and knowledge sharing.

Build and scale low-latency AI serving infrastructure for SLMs, prompt-injection engines, and classification services. Architect GPU-accelerated inference pipelines, backend microservices, Kubernetes clusters, rate limiting, tenant guardrails, monitoring, and autoscaling systems. Develop continuous evaluation, retraining, model CI/CD, regression gates, and MLOps/LLMOps pipelines while improving service reliability, latency, cost efficiency, and detection quality.

Build and harden Chromium-based browser components in C++ for AI and browser security. Develop prompt-injection and Shadow AI detection, integrate AI agents, MCP servers, and CDP, and support networking and HTTP security capabilities. Build tooling and detection services with Python or Rust, deploy cloud infrastructure on AWS or GCP using Kubernetes and Terraform, and optimize high-scale systems across browser and backend environments.

Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.

Provides L2 monitoring, triage, investigation, and escalation for AI and cloud security detections. Analyzes telemetry using KQL or SQL, maintains dashboards, and produces operational, compliance, and risk reporting. Investigates AI threats including prompt injection, jailbreaks, data leakage, agent hijacking, and unauthorized tool activity. Monitors Azure, AWS, and GCP posture, supports vulnerability and compliance remediation, documents cases, and partners with SOC, cloud, incident response, and engineering teams.

The Senior Security Engineer will secure cloud infrastructure, Kubernetes environments, and development lifecycles across AWS and Azure. Responsibilities include vulnerability identification and remediation, security automation, cloud-native architecture, IAM and network security, compliance auditing, incident collaboration, and security tool integration. The role also involves building automated detection and remediation systems, securing AI agents and machine-learning supply chains, mentoring junior engineers, and balancing cloud security with cost optimization.

Own Coinflow’s defensive and offensive security posture by operating the SIEM, conducting internal penetration tests, managing vulnerabilities and dependencies, improving the secure development lifecycle, and supporting PCI DSS, SOC 2, ISO 27001, and DORA compliance. The role also includes security monitoring, incident triage, threat modeling, security tooling automation, and collaboration with engineering teams across cloud and application environments.

Deliver cybersecurity platform demonstrations, free trials, technical qualification, and first 60 days of customer onboarding. Lead webinars, workshops, and cyber bootcamps; support customer adoption and migration at scale. Partner with sales, customer operations, product, content, and engineering teams while communicating technical concepts clearly to technical and non-technical audiences.

Build production infrastructure features in Go while embedding security into the product. Own vulnerability triage and remediation through patched releases, threat-model new features, conduct security-sensitive code and design reviews, and improve secure engineering practices. Requires deep Kubernetes knowledge, including API server, admission control, RBAC, controllers, kubelet, and attack surfaces such as container breakout and privilege escalation.

Manage and grow cybersecurity channel partnerships across EMEA. Responsibilities include developing joint business plans, driving indirect revenue, managing pipelines and deal registrations, enabling resellers and distributors, executing channel programs, coordinating co-marketing, recruiting partners, analyzing performance, and collaborating with sales, marketing, product, engineering, and customer success teams.

Conduct supplier and third-party security assessments, review controls and audit evidence, identify risks and gaps, recommend remediation, and monitor treatment plans throughout supplier lifecycles. Maintain risk records and metrics, support governance, audits, compliance initiatives, and executive reporting. Collaborate with procurement, legal, privacy, audit, business owners, suppliers, and security teams while improving third-party risk processes and promoting security best practices.