Security Control Engineer - Lisbon - Hybrid

La Fosse; Lisboa; On-site; EUR 50,000 - 75,000; Full time

Benefits offered by this job

Lisbon location

Onsite 4 days/week

Job summary

La Fosse is seeking a Security Control Engineer to design, implement and manage security controls across cloud, infrastructure and application environments. You will bridge security engineering, technical consulting, risk and customer engagement, delving into how controls work and why they are needed.

You’ll collaborate with customers, contribute to RFPs and produce technical documentation, while balancing security with practical engineering and project considerations.

Qualifications

• Experience in security engineering, infrastructure, cloud or related technical environment.
• Understanding of security principles, controls and risk.
• Experience with threat modelling or structured approaches to identifying security risks.
• Exposure to cloud environments such as AWS, Azure or GCP.
• Ability to explain security implications of architectures.

Responsibilities

• Design, develop and implement security controls across cloud, infrastructure and application environments.
• Assess projects and architectures to identify security risks and mitigations.
• Apply structured threat modelling approaches to understand threats and attack paths.
• Work with engineering teams to implement security requirements in practice.
• Explain the how and why behind security controls and decisions.
• Contribute to security solutions and build automation or tooling where appropriate.

Skills

Security engineering

Threat modelling

Cloud platforms

Python

Go

Customer engagement

Communication skills

Tools

Automation tooling

Job description

We’re looking for a Security Control Engineer to join a technical security team responsible for designing, implementing and managing security controls across a range of technologies and environments.

This is a broad role that sits between security engineering, technical consulting, risk and customer engagement. You’ll need enough technical depth to understand how systems are engineered, identify where security risks exist and determine how those risks should be addressed.

This is not a traditional GRC role. Rather than simply interpreting policies or checking compliance requirements, you’ll get into the technical detail behind how security controls work, why they are needed and how they should be implemented.

You’ll also work directly with customers, helping explain technical security concepts, contributing to RFPs and producing technical documentation and presentations.

What You’ll Do

• Design, develop and implement security controls across cloud, infrastructure and application environments.
• Assess projects and architectures to identify security risks and appropriate mitigations.
• Apply structured threat modelling approaches to understand potential threats and attack paths.
• Work with engineering teams to determine how security requirements should be implemented in practice.
• Explain the how and why behind security controls and technical security decisions.
• Contribute to the development of security solutions and, where appropriate, build automation or tooling rather than simply relying on third-party products.
• Support customer engagements, technical discussions, RFP responses and security documentation.
• Present technical security concepts and recommendations to customers and other stakeholders.
• Support the wider business continuity programme and related security initiatives.
• Balance security requirements with practical engineering and project considerations.
• Work across different technologies and security domains, developing a broad understanding rather than focusing exclusively on one specialist area.

What We’re Looking For

We're interested in people with a strong engineering mindset and broad technical security knowledge.

You don't need to be the deepest technical expert in cloud security, application security or infrastructure, but you should be comfortable getting into the technical detail and understanding how different technologies and security controls work.

You may come from backgrounds such as:

• Security Engineering
• DevSecOps
• Infrastructure / Platform Engineering with a security focus
• Application Security
• Technical Customer Engineering
• Security ArchitectureTechnical Security Consulting

We're particularly interested in people who can bridge the gap between technical engineering and security.

You’ll ideally have

• Experience working in security engineering, infrastructure, cloud or a related technical environment.
• A good understanding of security principles, controls and risk.
• Experience with threat modelling or structured approaches to identifying security risks.
• Exposure to cloud environments such as AWS, Azure or GCP.
• The ability to understand technical architectures and explain security implications.
• Some experience with scripting, automation or software development such as Python, Go or similar.
• Strong written and verbal communication skills.
• Confidence explaining technical concepts to customers and non-security stakeholders.
• A practical approach to security - understanding both the risk and how to address it technically.

The Person

You don't need to have spent your career in security.

We'd also consider someone from a strong technical engineering background who has developed an interest in security and can demonstrate a good understanding of security principles, risk and controls.

The key is that you're technically credible, curious and able to explain complex concepts clearly.

This could be an excellent next step for someone who wants to develop towards areas such as cloud security, application security or security architecture, without needing to already be a specialist in one of those fields.

What You’ll Get

• €50,000 - €75,000 salary, potentially higher for an exceptional candidate
• Broad exposure across security engineering, controls, risk and customer engagements
• Opportunity to work across different technologies and security domains
• A role combining technical security work with customer-facing responsibilities
• The opportunity to develop towards more specialised security engineering or architecture roles
• Lisbon based role with 4 days per week onsite