Devoteam Cyber Trust IT Security & Compliance Engineer Software Engineering & Digital Product Development

OpenTalent; Lisboa; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

OpenTalent in Lisbon, Portugal, seeks an IT Security & Compliance Engineer to manage identity lifecycles, threat monitoring, and daily audit activities, ensuring endpoints and cloud accounts align with SOC 2 Type 2 and ISO 27001 standards.

You will oversee L1/L2 SecOps, triage vulnerabilities, and maintain continuous security monitoring while supporting code/container scanning and email protection tools within a evolving security program.

Qualificações

• 3 to 5+ years of hands-on experience in IT Security, Compliance Engineering, or SecOps roles.
• Experience with Microsoft Entra ID and Intune MDM policies.
• Proven experience with SOC 2 Type 2 and ISO 27001 daily evidence collection and audit management.
• Solid understanding of L1/L2 SecOps, incident response, and vulnerability triage.
• Direct experience with AWS security tools (GuardDuty, Security Hub, Inspector) and code/container scanners (Snyk, ECR).

Responsabilidades

• Identity Operations & Endpoint Security: Manage user access lifecycles and apply security policies across endpoints.
• SecOps & Threat Management: Oversee L1/L2 security operations, triage vulnerabilities, and maintain continuous security monitoring.
• Daily Compliance & Audit Evidence: Collect, organize, and validate daily audit evidence for SOC 2 Type 2 and ISO 27001.
• Cloud & Pipeline Monitoring: Monitor AWS native security tooling and support code/container scanning integrations.
• Communication Gateway Protection: Administer email protection tools and compliance automation platforms.

Conhecimentos

Security operations

Audit/compliance knowledge

Incident response

Vulnerability triage

Compliance governance

Ferramentas

Microsoft Entra ID

Intune MDM

GuardDuty

Security Hub

Inspector

IAM Identity Center

KMS

GitHub Advanced Security

Snyk

ECR

Mimecast

Drata

Vanta

Descrição da oferta de emprego

We are seeking an IT Security & Compliance Engineer to manage our identity lifecycle, threat monitoring, and daily audit compliance activities. You will sit at the intersection of security operations and governance, ensuring our endpoints, cloud accounts, and access controls strictly adhere to SOC 2 Type 2 and ISO 27001 standards.

Key Responsibilities

• Identity Operations & Endpoint Security: Manage user access lifecycles, enterprise credential tools, and apply security policies across all endpoints.
• SecOps & Threat Management: Oversee L1/L2 security operations, triage incoming vulnerabilities, and maintain continuous security monitoring.
• Daily Compliance & Audit Evidence: Collect, organize, and validate daily audit evidence to satisfy SOC 2 Type 2 and ISO 27001 compliance frameworks.
• Cloud & Pipeline Monitoring: Monitor AWS native security tooling and support code/container scanning integrations.
• Communication Gateway Protection: Administer email protection tools and compliance automation platforms.

Tech Stack & Tools

• Access & Device Management: Microsoft Entra ID (Azure AD), Intune MDM, Credential Managers
• Cloud Security (AWS): GuardDuty, Security Hub, Inspector, IAM Identity Center, KMS
• Code & Container Security: GitHub Advanced Security, Snyk, Amazon ECR
• Email Protection & Compliance: Mimecast, Automated Compliance Platforms (e.g., Drata, Vanta)

Requirements & Qualifications

• 3 to 5+ years of hands‑on experience in IT Security, Compliance Engineering, or SecOps roles.
• Demonstrated expertise in managing Microsoft Entra ID and Intune MDM policies.
• Proven experience in daily evidence collection and audit management for SOC 2 Type 2 and ISO 27001 .
• Solid understanding of L1/L2 SecOps , incident response, and vulnerability triage.
• Direct experience with AWS security tools (GuardDuty, Security Hub, Inspector) and code/container scanners (Snyk, ECR).