Lead Security Engineer

Jobtailor; Porto Salvo; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a senior security leader to define the organization's security strategy, own architecture for critical infrastructure, and lead high-impact incident response. You will drive governance, Purple Team exercises, secure design patterns, and ensure compliance with major standards while collaborating with architecture teams and external vendors.

The role emphasizes driving security innovation, including DevSecOps, shift-left security practices, and automation, with a focus on

Qualificações

• Broad cybersecurity expertise across Red/Blue teams, identity management, encryption, and cloud security.
• Knowledge of regulatory compliance: SOC 2, ISO 27001, GDPR, DORA, PCI DSS, and HIPAA.
• Ability to manage conflicts and communicate with diverse stakeholders.
• Strategic planning and technical leadership skills.

Responsabilidades

• Define security strategy and roadmap for the organization.
• Take ownership of the security architecture for critical infrastructure.
• Lead high-impact security incidents and coordinate response.
• Design and implement a security governance model.
• Conduct Purple Team exercises, fostering collaboration between Red Team and Blue Team.
• Collaborate with architecture teams to define and adopt secure design patterns.
• Lead compliance and audit programs covering multiple standards and frameworks.
• Define security metrics and KPIs for presentation to leadership.
• Represent the security function in meetings with stakeholders.
• Manage relationships with security vendors, as well as tool evaluations and selection.
• Drive security innovation, including DevSecOps, shift-left practices, and security process automation.

Conhecimentos

Security Architecture Ownership

Cybersecurity Domain Expertise

Regulatory Compliance Knowledge

Strategic Planning

Technical Leadership

Formação académica

Bachelor's degree in Computer Engineering/Computer Science

Ferramentas

Security Tools Evaluation

Security Vendor Management

Descrição da oferta de emprego

• Define the organization's security strategy and roadmap


• Take ownership of the security architecture for critical infrastructure


• Lead high-impact security incidents and coordinate the response


• Design and implement a security governance model


• Conduct Purple Team exercises, fostering collaboration between Red Team and Blue Team


• Collaborate with architecture teams to define and adopt secure design patterns


• Lead compliance and audit programs covering multiple standards and frameworks


• Define security metrics and KPIs for presentation to leadership


• Represent the security function in meetings with stakeholders


• Manage relationships with security vendors, as well as tool evaluations and selection


• Drive security innovation, including DevSecOps, shift-left practices, and security process automation

Requirements

• Bachelor's degree in Computer Engineering, Computer Science, or a related field (preferred)


• Broad expertise across cybersecurity domains, including Red Team, Blue Team, identity management, encryption, and systems security, including Cloud environments


• Knowledge of regulatory compliance, including SOC 2, ISO 27001, GDPR, DORA, PCI DSS, and HIPAA


• Ability to manage conflicts and communicate with diverse stakeholders


• Strategic planning and technical leadership skills


• CISSP, OSCP, GIAC, or Cloud Security certifications (preferred)

Core Competencies

Demonstrates expertise in defining security strategies, leading security architecture, and managing compliance across multiple standards. Proficient in fostering collaboration between security teams and driving innovation in security practices.

Highest-signal resume keywords

• Security Architecture Ownership


• Cybersecurity Domain Expertise


• Regulatory Compliance Knowledge


• Strategic Planning Skills


• CISSP Certification

ATS Optimization Keywords

Hard Skills

• Security Governance Model Design


• Purple Team Exercises


• Security Metrics Definition


• DevSecOps Practices


• Shift-Left Security Practices


• Security Process Automation


• Identity Management


• Encryption


• Systems Security


• Cloud Security

Soft Skills

• Conflict Management


• Stakeholder Communication


• Technical Leadership

Certifications & Qualifications

• CISSP


• OSCP


• GIAC


• Cloud Security Certification

Industry Keywords

• SOC 2


• ISO 27001


• GDPR


• DORA


• PCI DSS


• HIPAA

Tools & Technologies

• Security Tools Evaluation


• Security Vendor Management