Cybersecurity Engineer

Hexa Consulting; Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Private health insurance (from day one

Psychological support access

Training and certification support

Flexible delivery arrangements

Childcare vouchers

Community moments and leadership

Upskilling in information security and

AI governance and cybersecurity best

Job summary

Hexa Consulting is seeking a Senior Cybersecurity Engineer to support cybersecurity activities in railway technology, with a strong focus on operational technology environments, secure architecture and risk-based protection of connected systems.

The role is hybrid, with presence required three days per week in Lisbon or Coimbra, and you will analyze cybersecurity risks, support secure design decisions, contribute to threat modelling, and collaborate with multidisciplinary teams to embed security

Qualifications

• Academic background in Cybersecurity or equivalent professional experience.
• Professional experience in operational technology cybersecurity, including exposure to complex, connected or safety-relevant environments.
• Experience with network security, security risk assessments, threat modelling, architecture reviews, testing and vulnerability assessments.
• Professional working proficiency in English, with the ability to communicate clearly in international technical contexts.
• Collaborative, respectful and solution-oriented mindset, with curiosity, ownership and willingness to keep learning.
• Awareness of AI trends, including agentic AI, and openness to explore how emerging technologies can improve products, processes or ways of working.

Responsibilities

• Analyze cybersecurity risks across operational technology environments, supporting secure design decisions and mitigation strategies.
• Contribute to security architecture reviews, threat modelling, vulnerability assessments and system security testing.
• Support the definition and validation of cybersecurity requirements across systems, networks and engineering delivery processes.
• Collaborate with multidisciplinary teams to embed security best practices throughout product, process and system lifecycles.
• Promote continuous improvement in cybersecurity practices, including awareness of emerging technologies and AI-enabled ways of working.

Skills

Operational technology cybersecurity

Security architecture concepts

Network security concepts

Security design best practices

Security risk assessments

Security architecture reviews

System security testing

Vulnerability assessments

Education

Cybersecurity degree or equivalent experience

Job description

We are looking for a Senior Cybersecurity Engineer to support cybersecurity activities in the railway technology sector, with a strong focus on operational technology environments, secure architecture and risk-based protection of connected systems. The role is hybrid, with presence required three days per week in Lisbon or Coimbra.

WHAT YOU WILL DO

• Analyze cybersecurity risks across operational technology environments, supporting secure design decisions and mitigation strategies.
• Contribute to security architecture reviews, threat modelling, vulnerability assessments and system security testing.
• Support the definition and validation of cybersecurity requirements across systems, networks and engineering delivery processes.
• Collaborate with multidisciplinary teams to embed security best practices throughout product, process and system lifecycles.
• Promote continuous improvement in cybersecurity practices, including awareness of emerging technologies and AI-enabled ways of working.

WHAT WE ARE LOOKING FOR

• Academic background in Cybersecurity or equivalent professional experience.
• Professional experience in operational technology cybersecurity, including exposure to complex, connected or safety-relevant environments.
• Previous experience with network security, security risk assessments, threat modelling, architecture reviews, testing and vulnerability assessment activities.
• Professional working proficiency in English, with the ability to communicate clearly in international technical contexts.
• Collaborative, respectful and solution-oriented mindset, with curiosity, ownership and willingness to keep learning.
• Awareness of AI trends, including agentic AI, and openness to explore how emerging technologies can improve products, processes or ways of working.

TECHNICAL SKILLS

• Operational technology cybersecurity
• Security architecture concepts
• Network security concepts
• Security design best practices
• Security risk assessments
• Security architecture reviews
• System security testing
• Vulnerability assessments
• Cybersecurity standards and frameworks

NICE TO HAVE

• Knowledge of ISO/IEC 27001
• Knowledge of ISA/IEC 62443
• Knowledge of ISO/SAE 21434
• Knowledge of the NIST Cybersecurity Framework

WHAT WE OFFER

• Private health insurance from your first day, with no waiting periods and optional family extension.
• Confidential and free access to psychological support, wellbeing content and live sessions from day one.
• Continuous training and certification support to strengthen long-term professional development.
• Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• Childcare vouchers and practical measures designed to support personal and family life.
• Community moments, shared milestones and leadership presence when it matters most.
• Upskilling opportunities in information security, AI governance and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. In line with the Portuguese Diversity Charter, we value different backgrounds, perspectives and experiences as part of how we build stronger teams.

HEXA LIFE

At Hexa, every professional is a Builder. We work with honesty, mutual support and agility, contributing to meaningful projects, reliable solutions and long-term professional relationships. You will join a collaborative environment where people are encouraged to learn, share knowledge and build what comes next together.