Security Architect

Korn Ferry Group; Porto; Hybrid; EUR 60,000 - 90,000; Part time

Job summary

Korn Ferry Group seeks a Security Architect to lead the security direction for a global payments and technology provider in Porto. The role is hands-on and strategic, guiding cloud security as the estate moves to public cloud and collaborating across engineering teams.

The successful candidate will own network and edge security, vulnerability management strategy, threat detection, and third-party application security, with CISSP/CCSP/SABSA welcomed but not essential.

Qualifications

• Hands-on security architecture or senior security engineering depth.
• Ability to drive security improvements without direct authority.
• Experience in cloud security and regulated environments is a plus.

Responsibilities

• Network and edge security assurance, including WAF.
• Vulnerability management strategy: risk scoring, EOL systems, closing out pen tests.
• Threat detection, including honeypots and deception technology.
• SaaS and third-party application security assurance.

Skills

Security architecture

Senior security engineering

Vulnerability management

Threat detection

WAF

Education

CISSP

CCSP

SABSA

Tools

WAF

Job description

Security Architect | Porto | 6-month initial contract | Hybrid, 3 days onsite

I am hiring a Security Architect for a global payments and technology provider that is scaling its Porto engineering hub.

Their estate is moving to public cloud and they need someone to own the security direction as it does. Strategic, but genuinely hands-on.

Four things you would own:

• Network and edge security assurance, including WAF
• Vulnerability management strategy: risk scoring, EOL systems, closing out pen test findings
• Threat detection, including honeypots and deception technology
• SaaS and third-party application security assurance

You will need real security architecture or senior security engineering depth, proper ownership of vulnerability management rather than exposure to it, and the ability to get engineering teams and vendors to do things without having authority over them. Payments, PCI or other regulated environments is a strong plus. CISSP, CCSP or SABSA welcome but not essential.

Porto based or able to commute. 3 days onsite. Initial 6 months.