security engineer

Enfint; Lisboa; Presencial; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible work conditions

Health insurance

Training opportunities and certs

Career progression and development

Partnership discounts

Sports and wellness activities

Public transport access

Free parking lot

Canteen

Resumo da oferta

Enfint ищет специалиста по кибербезопасности для проектирования и внедрения защищённых облачных архитектур в Microsoft Azure. Вы будете разрабатывать и внедрять политики и процедуры безопасности, мониторить среды, управлять рисками и соответствовать требованиям регуляторов.

Требуется опыт от 5 лет в IT-безопасности с упором на облачную безопасность, знание Azure AD/MFA, Defender for Cloud и поиск уязвимостей. Гибкий график и развитие в международной среде.

Qualificações

• Степень в области информатики, информационной безопасности или смежной.

Responsabilidades

• Разрабатывать и внедрять безопасные облачные архитектуры в Microsoft Azure.
• Разрабатывать, разворачивать и управлять мерами безопасности, политиками и процедурами.
• Мониторить облачные окружения, выявлять угрозы, уязвимости и инциденты.
• Проводить риск-оценки и сканы уязвимостей с своевременным устранением.
• Соблюдать стандарты отрасли и требования комплаенса.
• Реализовывать IAM, включая RBAC модели.
• Обеспечивать безопасность сетевых компонентов облака (VNets, firewalls, private endpoints).
• Сотрудничать с DevOps для интеграции безопасности в CI/CD (DevSecOps).
• Реагировать на инциденты безопасности и анализировать корневые причины.
• Вести документацию по архитектуре и процессам безопасности.

Conhecimentos

Cloud security

Azure Defender

Azure Key Vault

IAM - Azure AD

RBAC

Zero Trust

Scripting (PowerShell/Python)

SIEM

Networking security

Threat detection

Formação académica

Степень по информатике/ информационной безопасности

Связанные области

Ferramentas

Terraform

ARM/Bicep

Descrição da oferta de emprego

Описание: The Bosch group operates globally with over 400,000 employees across 60 countries, focusing on inventing technologies and services to improve quality of life. The Lisbon-based entity serves as a central hub for the group, providing essential services in accounting, procurement, communications, legal, and marketing, while maintaining a leadership position in information technology and industrial consultancy.

Задачи

• Design and implement secure cloud architectures, primarily on Microsoft Azure;
• Develop, deploy, and manage security controls, policies, and procedures;
• Monitor cloud environments to detect and respond to threats, vulnerabilities, and incidents;
• Perform risk assessments and vulnerability scans, ensuring timely remediation;
• Ensure compliance with industry standards and security frameworks;
• Implement and manage Identity and Access Management (IAM), including RBAC models;
• Secure cloud networking components such as VNets, firewalls, and private endpoints;
• Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps);
• Respond to security incidents and conduct root cause analysis;
• Maintain clear and up-to-date documentation of security architecture and processes.

Требования

• Degree in Computer Science, Information Security, or a related field;
• Minimum of 5 years of experience in IT Security with a strong focus on Cloud Security;
• Hands-on experience with Microsoft Azure security services like Defender for Cloud and Key Vault;
• Strong understanding of cloud architecture and security best practices;
• Experience with identity management solutions including Azure AD, MFA, and Conditional Access;
• Solid knowledge of network security concepts such as firewalls, VPNs, and Zero Trust;
• Familiarity with scripting and automation using PowerShell, Python, or similar;
• Experience with security monitoring tools and SIEM solutions;
• Good understanding of compliance and regulatory requirements;
• Fluent in English (written and spoken);
• Analytical mindset with strong problem-solving skills, proactive and detail-oriented approach, and strong collaboration skills;
• Nice to have: Experience with AWS or Google Cloud Platform, knowledge of container security (Docker, Kubernetes), experience with Infrastructure as Code (Terraform, ARM, Bicep), exposure to endpoint security and threat intelligence tools, relevant certifications (e.g., AZ-500).

Условия

• Flexible work conditions;
• Exchange with colleagues around the world;
• Health insurance and medical office on site;
• Training opportunities and certifications;
• Opportunities for career progression and continuous professional development;
• Access to discounts in partnerships;
• Sports and health-related activities;
• Access to public transport;
• Free parking lot;
• Canteen.