Cyber Security Engineer

About the role:

We are adding a Cyber Security Engineer to our Security Engineering team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Remote, open to candidates across Portugal. Weekday working hours, with room to shift your day when needed. We talk mostly in Slack and hop on quick calls when something needs discussing.

Key responsibilities:

• Automate security checks in CI/CD pipelines.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Coordinate external penetration tests and track remediation.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.

Who you are:

• 2-4 years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Good judgment on risk: knowing what to fix now and what can wait.

Preferred:

• Kubernetes and container security (Falco, OPA Gatekeeper)

Benefits:

€2,900 to €3,400 monthly

• Private health insurance.
• Stock options.
• Meal vouchers.

About TLT Risk Partners:

The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Based in Lisbon, TLT Risk Partners also trains client staff and runs simulated phishing campaigns. Founded in 2013, we now have 100 employees.

Please submit your CV in English.

Please include your notice period and salary expectations.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at TLT Risk Partners Lda..