Cybersecurity Analyst

Komodo Consulting; Lisboa; Híbrido; EUR 50 000 - 80 000; Tempo integral

Resumo da oferta

Komodo Consulting seeks a Cybersecurity Analyst to join our Lisbon-based team on a hybrid project for a Technology Company. You will own the detection lifecycle, investigate security events, and collaborate with engineering to embed threat modeling.

The role requires hands-on XDR, vulnerability management, scripting, cloud skills, and a strong command of English in a fully English-speaking environment. We offer a dynamic Lisbon setup with 2 days in the office weekly and opportunities to shape

Qualificações

• 3+ years hands-on experience across two or more cybersecurity domains.
• Hands-on experience with XDR platforms (Palo Alto, CrowdStrike) including alert investigation.
• Experience with vulnerability management tools (Tenable, Qualys) and API automation a plus.
• Proficiency in Python or Bash for automation.
• Solid knowledge of Linux, macOS and Windows.
• Familiarity with AWS/GCP and IaC concepts.
• Knowledge of MITRE ATT&CK, NIST and CIS frameworks.
• Strong English communication skills in a fully English-speaking environment.

Responsabilidades

• Own detection lifecycle within XDR platform, build and tune rules.
• Conduct vulnerability assessments and drive remediation with teams.
• Promote security awareness and embed threat modeling with engineers.
• Support incident response from containment to recovery with MITRE ATT&CK.
• Build automation scripts and apply IaC to security tooling.
• Evolve internal security processes and evaluate new solutions.

Conhecimentos

XDR platforms

Vulnerability management

Scripting (Python / Bash)

Linux / macOS / Windows

Networking & Cloud (AWS / GCP)

Infrastructure as Code

MITRE ATT&CK / NIST / CIS

English communication

Ferramentas

Palo Alto XDR

CrowdStrike

Tenable

Qualys

Descrição da oferta de emprego

Komodo Consulting is a technology and strategy firm specializing in Digital Transformation. Operating in Portugal and Poland, we provide IT Consulting & Nearshore services. We support both public and private sector organizations through two main areas:

• Consulting — with a focus on strategy, investment analysis, and digital process improvement;
• IT Team Augmentation — helping clients scale and strengthen their tech teams.

The Project

We are seeking a Cybersecurity Analyst to work on a project for a Technology Company.

You will have the following responsibilities:

• Own the detection lifecycle within the XDR platform, including building, maintaining, and refining rules, as well as triaging security events to assess whether an incident has taken place;
• Conduct vulnerability assessments across the infrastructure, analyse findings, produce clear reports, and drive remediation efforts in collaboration with relevant teams;
• Act as a security reference point for colleagues, promoting awareness and best practices, and partner with engineering teams to embed threat modeling into the development process;
• Support incident response activities, from containment through to recovery, documenting findings and translating lessons learned into concrete improvements using established frameworks such as MITRE ATT&CK
• Build automation scripts and tools to reduce manual effort, and apply Infrastructure as Code principles to manage and integrate security tooling at scale;
• Actively contribute to the evolution of internal security processes and evaluate emerging solutions to continuously raise the organisation's security standards.

You need to have the following skills/experience:

• At least 3 years of hands-on experience in two or more relevant cybersecurity areas;
• Hands‑on experience with XDR platforms (e.g., Palo Alto, CrowdStrike), including investigating security events and building and tuning detection rules;
• Experience with vulnerability management tools (e.g., Tenable, Qualys), including scan creation, reporting, and platform auditing; knowledge of API‑based automation is a plus;
• Proficiency in scripting languages such as Python or Bash for task automation;
• Solid knowledge of Linux and macOS operating systems, with a practical understanding of Windows environments;
• Familiarity with networking concepts, cloud platforms (AWS, GCP), and a strong interest in applying Infrastructure as Code (IaC) principles;
• Basic understanding of security frameworks such as MITRE ATT&CK, NIST, and CIS, and their practical application;
• Strong communication skills in English, both written and spoken;
• English proficiency at B2 level or above, with confidence communicating and collaborating in a fully English‑speaking environment.

Location

Hybrid, Lisboa (2 times a week at the office)