Cybersecurity Engineer / Architect

Hexa People; Lisboa; On-site; EUR 50,000 - 75,000; Full time

Job summary

Hexa People is looking for an experienced Cybersecurity Engineer/Architect to be the on-site technical security lead for a client environment in Lisbon, working closely with a remote SOC. This hands-on role focuses on improving detection capabilities, managing critical security infrastructure, and strengthening the organisation's security posture through SIEM/EDR, WAF, and incident response.

Collaborate with cross-functional teams to close security gaps and act as the primary liaison between the

Qualifications

• Degree or equivalent qualification in Computer Science, Cybersecurity, IT Engineering or a related field.
• Strong technical English; Portuguese proficiency is desirable.
• At least five years of hands-on experience in SOC operations, Security Engineering or related cybersecurity environments.
• Proven experience with WAF technologies, ideally Fortinet FortiWeb, alongside Fortinet NGFW and Check Point.
• Solid experience with SIEM detection engineering, security event correlation and EDR technologies (QRadar and Cybereason).

Responsibilities

• Design, implement and optimise SIEM and EDR detection rules and correlation use cases.
• Administer and maintain Fortinet FortiWeb WAF infrastructure, including rule management and tuning.
• Configure and optimise security log sources and SIEM data integrations.
• Identify architectural security gaps and recommend improvements.
• Serve as the primary on-site liaison between the client and the remote SOC team.

Skills

SIEM engineering

EDR technology

WAF Fortinet FortiWeb

Fortinet NGFW

Check Point

QRadar

Cybereason

Education

Computer Science degree

Tools

FortiWeb

FortiGate

QRadar

Cybereason

Job description

We are looking for an experienced Cybersecurity Engineer / Architect to become the on-site technical security lead for a client environment, working closely with a remote Security Operations Centre (SOC).

This is a hands-on engineering role where you will directly improve security detection capabilities, manage critical application security infrastructure and strengthen the organisation's overall security posture.

Key Responsibilities

• Design, implement and optimise SIEM and EDR detection rules, correlation use cases and security policies.
• Administer and maintain Fortinet FortiWeb WAF infrastructure, including rule management, exceptions, whitelisting, blacklisting and false-positive tuning.
• Configure, maintain and optimise security log sources and SIEM data integrations.
• Identify architectural security gaps, recommend improvements and provide advanced technical support during security incidents.
• Act as the primary on-site technical liaison between the client and the remote SOC team.

Requirements

• Degree or equivalent professional qualification in Computer Science, Cybersecurity, IT Engineering or a related field.
• Strong technical English communication skills; Portuguese proficiency is desirable.
• At least five years of hands-on experience in SOC operations, Security Engineering or related cybersecurity environments.
• Proven experience with WAF technologies, ideally Fortinet FortiWeb, alongside Fortinet NGFW, Check Point and network security solutions.
• Solid experience with SIEM detection engineering, security event correlation and EDR technologies, preferably IBM QRadar and/or Cybereason.