Cybersecurity Engineer

Hexa Group; Lisboa, Coimbra; Híbrido; EUR 55 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Private health insurance

Counseling & wellbeing

Training & certs

Flexible work

Childcare vouchers

Community events

Upskilling in security

Resumo da oferta

Hexa Group is seeking a Senior Cybersecurity Engineer to support cybersecurity activities in the railway technology sector, with a strong focus on operational technology environments, secure architecture and risk-based protection of connected systems. The role is hybrid, requiring presence three days a week in Lisbon or Coimbra.

You will analyze risks, contribute to security reviews, threat modelling and testing, and collaborate across engineering teams to embed security principles throughout

Qualificações

• Academic background in Cybersecurity or equivalent experience.
• Experience in OT cybersecurity and complex, connected environments.
• English proficiency for international technical contexts.

Responsabilidades

• Analyze cybersecurity risks across OT environments and support secure design decisions.
• Contribute to security architecture reviews, threat modelling, vulnerability assessments and testing.
• Define and validate cybersecurity requirements across systems, networks and processes.
• Collaborate with multidisciplinary teams to embed security throughout lifecycles.
• Promote continuous improvement in cybersecurity practices and AI-enabled approaches.

Conhecimentos

Operational technology cybersecurity

Security architecture concepts

Network security concepts

Security design best practices

Security risk assessments

Threat modelling

Security architecture reviews

System security testing

Vulnerability assessments

Cybersecurity standards and frameworks

Formação académica

Academic background in Cybersecurity

Descrição da oferta de emprego

We are looking for a Senior Cybersecurity Engineer to support cybersecurity activities in the railway technology sector, with a strong focus on operational technology environments, secure architecture and risk-based protection of connected systems. The role is hybrid, with presence required three days per week in Lisbon or Coimbra.

WHAT YOU WILL DO

• - Analyze cybersecurity risks across operational technology environments, supporting secure design decisions and mitigation strategies.
• - Contribute to security architecture reviews, threat modelling, vulnerability assessments and system security testing.
• - Support the definition and validation of cybersecurity requirements across systems, networks and engineering delivery processes.
• - Collaborate with multidisciplinary teams to embed security best practices throughout product, process and system lifecycles.
• - Promote continuous improvement in cybersecurity practices, including awareness of emerging technologies and AI-enabled ways of working.

WHAT WE ARE LOOKING FOR

• - Academic background in Cybersecurity or equivalent professional experience.
• - Professional experience in operational technology cybersecurity, including exposure to complex, connected or safety-relevant environments.
• - Previous experience with network security, security risk assessments, threat modelling, architecture reviews, testing and vulnerability assessment activities.
• - Professional working proficiency in English, with the ability to communicate clearly in international technical contexts.
• - Collaborative, respectful and solution-oriented mindset, with curiosity, ownership and willingness to keep learning.
• - Awareness of AI trends, including agentic AI, and openness to explore how emerging technologies can improve products, processes or ways of working.

TECHNICAL SKILLS

• - Operational technology cybersecurity
• - Security architecture concepts
• - Network security concepts
• - Security design best practices
• - Security risk assessments
• - Threat modelling
• - Security architecture reviews
• - System security testing
• - Vulnerability assessments
• - Cybersecurity standards and frameworks

NICE TO HAVE

• - Knowledge of ISO/IEC 27001
• - Knowledge of ISA/IEC 62443
• - Knowledge of ISO/SAE 21434
• - Knowledge of the NIST Cybersecurity Framework

WHAT WE OFFER

• - Private health insurance from your first day, with no waiting periods and optional family extension.
• - Confidential and free access to psychological support, wellbeing content and live sessions from day one.
• - Continuous training and certification support to strengthen long-term professional development.
• - Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• - Childcare vouchers and practical measures designed to support personal and family life.
• - Community moments, shared milestones and leadership presence when it matters most.
• - Upskilling opportunities in information security, AI governance and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. In line with the Portuguese Diversity Charter, we value different backgrounds, perspectives and experiences as part of how we build stronger teams.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, contributing to meaningful projects, reliable solutions and long-term professional relationships. You will join a collaborative environment where people are encouraged to learn, share knowledge and build what comes next together.