Cyber Security Engineer

Shakers; Lisboa; Hybrid; EUR 55,000 - 75,000; Full time

Job summary

Shakers is seeking a Cyber Engineer to lead cybersecurity projects for clients across industries. The role focuses on audits, vulnerability analyses and aligning security postures with ISO 27001/27701, NIST and CIS frameworks.

You will design and implement security controls across on‑premises and cloud environments (AWS, Azure, GCP). The position is hybrid, with 2–3 days on site in Lisbon or Porto, Portugal.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology or related field.
• 5 years of experience as a Cybersecurity Engineer or similar role.
• Hands-on audits, assessments and vulnerability analyses; designing security solutions; on-premises and cloud infrastructure hardening.
• Knowledge of ISO 27001/27701, NIST, CIS, SOC 2.
• Experience delivering cybersecurity awareness training and materials.
• Fluency in Portuguese and high proficiency in English.

Responsibilities

• Deliver a diverse portfolio of cybersecurity projects and services to multiple clients.
• Conduct technical cybersecurity audits, assessments and vulnerability analyses.
• Align clients’ cybersecurity posture with relevant standards, regulations and best practices.
• Design, implement and optimise security solutions across on‑premises and multi‑cloud environments (AWS, Azure, GCP).
• Support cybersecurity risk management and the end-to-end vulnerability lifecycle from identification to remediation.
• Develop and test incident response plans and provide hands‑on support during incidents.
• Produce clear reports on findings, risks and remediation recommendations; deliver cybersecurity awareness training.

Skills

Audit & assessments

Vulnerability analysis

Cloud security

IAM

Incident response

SIEM

Security reporting

Security training

Security standards

Education

Bachelor’s degree in CS/IT

Tools

AWS

Azure

GCP

WAF

EDR/XDR

SIEM

Job description

We are hiring a Cyber Engineer for a leading European technology group, through Shakers. The role delivers cybersecurity projects and services to clients across multiple industry sectors.

What you will do

• Deliver a diverse portfolio of cybersecurity projects and services to multiple clients.
• Conduct technical cybersecurity audits, assessments and vulnerability analyses.
• Align clients' cybersecurity posture with relevant standards, regulations and best practices.
• Design, implement and optimise security solutions and controls across on-premises and multi-cloud environments (AWS, Azure and GCP).
• Support cybersecurity risk management and the end to end vulnerability lifecycle, from identification and prioritisation through to technical remediation and validation.
• Develop and test incident response plans and provide hands-on support during incidents.
• Support deployment, configuration and tuning of monitoring solutions, and analyse security events and alerts.
• Produce clear reports on findings, risks and remediation recommendations, and deliver cybersecurity awareness training.

What you need

• Bachelor's degree in Computer Science, Information Technology or a related field.
• 5 years of experience as a Cybersecurity Engineer or in a similar role.
• Hands-on experience with cybersecurity audits, assessments and vulnerability analysis; designing and optimising security solutions; on-premises and cloud infrastructure architecture and hardening; IAM principles and solutions; and the risk, vulnerability and incident response lifecycles.
• Knowledge of security standards and frameworks: ISO 27001/27701, NIST, CIS, SOC 2.
• Experience creating and delivering cybersecurity awareness training and materials.
• Fluency in Portuguese and high proficiency in English.

Nice to have

• Certifications such as CISSP, CISM, CISA, CompTIA Security+, CEH or ISO 27001 Lead Implementer/Auditor.
• Experience with advanced firewalls, WAF, IDS/IPS, EDR/XDR platforms, DLP tools, SIEM solutions and cloud-native security services.
• Understanding of AI/ML principles and their cybersecurity implications.
• Scripting in Bash, Python or PowerShell for security automation.

Full time, long term. Hybrid, 2 to 3 days per week on site, Lisbon or Porto.