Lead Security Engineer

Randstad Portugal; Lisboa; On-site; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Flexible work environment

Centre of Excellence

Job summary

Randstad Digital is seeking a Lead Security Engineer to join a greenfield cyber transformation within a global manufacturing organisation. You will embed security into technology design, implementation, and operations across cloud and on-premise environments, acting as a trusted security advisor to regional teams.

Reporting to the Head of Security Engineering, you will lead security engineering initiatives, develop secure-by-design practices, and promote Security at the Core principles across

Responsibilities

• Secure design, implementation, and operation of technology platforms across cloud and on-premise environments.
• Drive security standards, best practices, and secure-by-design methodologies across the organisation.
• Protect data across its lifecycle, including encryption at rest and in transit, DLP, access controls.
• Implement application security controls and secure development practices.
• Identify vulnerabilities, assess risks, and drive security improvements.
• Collaborate with multinational teams to design, build, and operate secure solutions.

Job description

Randstad Digital is currently searching for a talented Lead Security Engineer to join the team of one of our prestigious clients.

Reporting to the Head of Security Engineering, the Lead Security Engineer plays a critical role within the Global Cyber Security & Risk Team.

This is an exciting opportunity to join a greenfield cyber transformation and help build a world-class Cyber Security Centre of Excellence within a global manufacturing organisation. The Security Engineering team will set a new benchmark for cyber security across the business, embedding security into technology, cloud platforms, applications, and data from the outset.

Success in this role requires a passion for cyber security, a strong engineering mindset, and the ability to collaborate with teams across multiple regions and cultures. You will act as a trusted security advisor, helping regional technology teams design, build, and operate secure solutions while driving the adoption of "Security at the Core" principles.

Purpose of the Role

The Lead Security Engineer (LSE) works closely with technology teams across designated regions, providing security engineering expertise and acting as a trusted partner throughout the technology lifecycle.

The role is responsible for embedding security into technology design, implementation, and operations across both cloud and on-premise environments. Working as part of the Security Engineering Centre of Excellence, the LSE will empower regional teams to build secure systems, applications, and processes through expert guidance, technical leadership, and collaboration.

The successful candidate will play a key role in protecting the organisation's assets, data, customers, and reputation by proactively identifying, managing, and reducing cyber security risks whilst enabling business growth and innovation.

responsabilidades chave

Security Engineering

• Secure design, implementation, and operation of technology platforms across cloud and on-premise environments.

Security Principles & Governance

• Driving the adoption of security standards, best practices, and secure-by-design methodologies across the organisation.

Data Security

• Protecting business-critical and sensitive information throughout its lifecycle.

Application Security

• Ensuring applications are designed, developed, tested, and deployed securely.

Risk Mitigation

• Identifying, assessing, and reducing security risks through effective engineering controls and security improvements.

Key Responsibilities

Cyber Security Leadership

• Stay current with emerging cyber threats, vulnerabilities, attack techniques, and industry best practices.
• Translate security trends and intelligence into actionable improvements and recommendations.
• Promote and foster a culture of cyber security awareness, accountability, and responsibility across technology teams.
• Advocate cloud-native security capabilities and modern security engineering approaches that deliver maximum value to the business.
• Act as a security subject matter expert and trusted advisor to regional and global technology stakeholders.

Security Engineering

• Ensure cloud platforms and on-premise systems align with secure design principles and industry best practices.
• Design, implement, and maintain security controls across infrastructure, platforms, and services.
• Ensure secure configuration of cloud resources and enterprise infrastructure.
• Develop scalable security solutions aligned to business and technical requirements.
• Lead the adoption and continuous improvement of security standards, policies, and technical controls.
• Support security reviews and assessments for new and existing technology solutions.

Data Security

• Identify and classify information based on business value, sensitivity, and regulatory requirements.
• Implement and maintain data security controls throughout the entire data lifecycle.
• Ensure data is appropriately protected during creation, storage, transmission, use, sharing, and disposal.
• Implement solutions such as:
• Encryption at rest and in transit
• Data Loss Prevention (DLP)
• Access controls
• Data masking
• Information protection technologies
• Monitor developments in data security technology and integrate appropriate improvements into the organisation's strategy.

Application Security

• Implement application security controls and secure development practices.
• Support vulnerability assessments and penetration testing activities.
• Promote secure coding principles and best practices.
• Work with development and technology teams to identify and address security weaknesses early in the development lifecycle.
• Support continuous improvement of application security maturity across the organisation.

Risk Management & Security Improvement

• Translate business and project requirements into secure, scalable solutions.
• Identify vulnerabilities, weaknesses, and security risks across technology environments.
• Implement security improvements that reduce organisational risk and strengthen resilience.
• Balance security requirements with usability, scalability, cost, and resource considerations.
• Contribute to security roadmaps and ongoing cyber security improvement initiatives.

Collaboration & Enablement

• Collaborate with business and technology teams to understand objectives and design secure solutions that support business outcomes.
• Provide security engineering expertise during cloud and technology transformation initiatives.
• Work closely with teams integrating new applications and services into existing environments.
• Support cloud migration activities where required.
• Deliver security guidance, coaching, and training to colleagues and third-party partners.
• Build strong working relationships across multiple functions, regions, and cultures.

Compliance & Assurance

• Support compliance with recognised security frameworks and industry standards.
• Contribute to cloud security governance and compliance reporting activities.
• Ensure security controls and engineering practices align with organisational and regulatory requirements.
• Support audit and assurance activities where appropriate.

Essential Skills & Experience

Collaboration & Communication

• Experience working successfully within multinational and multicultural environments.
• Strong stakeholder management and relationship-building skills.
• Ability to communicate complex technical information to technical and non-technical audiences.
• Ability to influence decision-making and drive adoption of secure practices.

Security Engineering & Architecture

• In-depth experience in cloud security architecture and secure design patterns.
• Practical cloud engineering experience.
• Experience designing and implementing secure technology solutions.
• Experience with hybrid cloud and on-premise environments.
• Strong understanding of security engineering principles and practices.

Data Security

• Deep understanding of:
• Encryption technologies
• Data Loss Prevention (DLP)
• Access control models
• Information protection
• Data lifecycle security

Application Security

• Strong knowledge of application security principles and methodologies.
• Understanding of secure coding practices and the OWASP Top 10.
• Experience supporting vulnerability management and application security activities.

Network & Infrastructure Security

• In-depth understanding of:
• WAN technologies
• LAN technologies
• Cloud networking
• Infrastructure security principles
• Security Frameworks & Governance

Security Frameworks & Governance

• Practical experience working with recognised frameworks and standards including:
• ISO 27001
• SOX
• TISAX
• NIST
• CIS Controls
• NIS2
• Understanding of security governance, risk management, and compliance.

Problem Solving

• Strong analytical skills with the ability to assess complex security challenges.
• Ability to develop practical, risk-based solutions.
• Experience balancing business requirements with security needs.

Desirable Skills & Experience

Industry Experience

• Manufacturing sector experience.
• Understanding of industrial technology environments and associated security challenges.
• Knowledge of Operational Technology (OT) environments and security best practices.

Advanced Security Capabilities

• Security automation experience.
• Threat intelligence exposure.
• Incident response experience.
• Advanced cloud-native security capabilities.

Professional Certifications

• Relevant industry certifications are desirable, including:
• CISSP
• CCSP
• CISM
• GIAC
• AZ-500
• CEH
• Equivalent security certifications

Professional Background

Proven experience in Cyber Security Engineering.

Proven track record delivering successful security engineering initiatives and programmers.

Strong practical experience in Azure cloud engineering experience.

Strong knowledge of cloud computing, virtualization, networking, and emerging technologies.

Experience documenting security standards, processes, procedures, and technical guidance.

A hands-on approach with a willingness to roll up sleeves and actively contribute to delivery.

What We're Looking For

We're seeking a collaborative and technically strong security professional who enjoys solving complex problems, building relationships, and helping shape the future of cyber security within a global organization.

The ideal candidate will be:

• A strong communicator and trusted advisor
• Passionate about cyber security and technology
• Comfortable influencing stakeholders at all levels
• Adaptable in a rapidly evolving threat landscape
• Calm and effective under pressure
• Collaborative and team-oriented
• Committed to continuous learning and development
• Excited by the opportunity to help build a Cyber Security Centre of Excellence from the ground up

principais benefícios

• Competitive salary and benefits
• Flexible work environment with a focus on work-life balance.
• True Impact on the company development and culture;