Devoteam Cyber Trust | IT Security & Compliance Engineer | Software Engineering & Digital Product Development

Devoteam; Lisboa; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Devoteam Cyber Trust in Portugal is seeking an IT Security & Compliance Engineer to manage identity lifecycles, threat monitoring, and daily audit compliance, ensuring endpoints, cloud accounts, and access controls align with SOC 2 Type 2 and ISO 27001 standards.

You will work on SecOps and governance tasks, collaborating with AWS tools, GitHub Advanced Security, Snyk, and Mimecast to strengthen security across customer environments. This is a full-time role in Lisbon, Portugal.

Qualificações

• Hands-on IT security/compliance roles with SOC 2 Type 2 and ISO 27001 experience.
• Experience with Microsoft Entra ID and Intune MDM policies.
• Proficient in AWS security services and code/container scanners.
• Familiarity with security operations (L1/L2) and incident response.
• Ability to collect daily audit evidence for compliance.

Responsabilidades

• Identity Operations & Endpoint Security: Manage user access lifecycles, enterprise credential tools, and apply security policies across all endpoints.
• SecOps & Threat Management: Oversee L1/L2 security operations, triage vulnerabilities, and maintain continuous security monitoring.
• Daily Compliance & Audit Evidence: Collect, organize, and validate daily audit evidence to satisfy SOC 2 Type 2 and ISO 27001.
• Cloud & Pipeline Monitoring: Monitor AWS native security tooling and support code/container scanning integrations.
• Communication Gateway Protection: Administer email protection tools and compliance automation platforms.
• Cloud Security (AWS): GuardDuty, Security Hub, Inspector, IAM Identity Center, KMS
• Code & Container Security: GitHub Advanced Security, Snyk, Amazon ECR
• Email Protection & Compliance: Mimecast, Automated Compliance Platforms (e.g., Drata, Vanta)

Conhecimentos

Microsoft Entra ID

Intune MDM policies

SOC 2 Type 2

ISO27001

AWS Security Tools

Snyk/ECR

GitHub Advanced Security

Email protection tools

Ferramentas

GuardDuty

Security Hub

Inspector

IAM Identity Center

KMS

Descrição da oferta de emprego

Devoteam Cyber Trust | IT Security & Compliance Engineer | Software Engineering & Digital Product Development

• Full-time

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients.

The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

We are seeking an IT Security & Compliance Engineer to manage our identity lifecycle, threat monitoring, and daily audit compliance activities. You will sit at the intersection of security operations and governance, ensuring our endpoints, cloud accounts, and access controls strictly adhere to SOC 2 Type 2 and ISO 27001 standards.

Key Responsibilities

• Identity Operations & Endpoint Security: Manage user access lifecycles, enterprise credential tools, and apply security policies across all endpoints.


• SecOps & Threat Management: Oversee L1/L2 security operations, triage incoming vulnerabilities, and maintain continuous security monitoring.


• Daily Compliance & Audit Evidence: Collect, organize, and validate daily audit evidence to satisfy SOC 2 Type 2 and ISO 27001 compliance frameworks.


• Cloud & Pipeline Monitoring: Monitor AWS native security tooling and support code/container scanning integrations.


• Communication Gateway Protection: Administer email protection tools and compliance automation platforms.


• Cloud Security (AWS): GuardDuty, Security Hub, Inspector, IAM Identity Center, KMS


• Code & Container Security: GitHub Advanced Security, Snyk, Amazon ECR


• Email Protection & Compliance: Mimecast, Automated Compliance Platforms (e.g., Drata, Vanta)

Requirements & Qualifications

• 3 to 5+ years of hands-on experience in IT Security, Compliance Engineering, or SecOps roles.


• Demonstrated expertise in managing Microsoft Entra ID and Intune MDM policies.


• Proven experience in daily evidence collection and audit management for SOC 2 Type 2 and ISO 27001.


• Solid understanding of L1/L2 SecOps, incident response, and vulnerability triage.


• Direct experience with AWS security tools (GuardDuty, Security Hub, Inspector) and code/container scanners (Snyk, ECR).

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.

Join us in our mission to safeguard our clients' critical digital assets by applying deep technical expertise to their most strategic projects.

Job Location