security engineer in AI/cloud security

HireHi; Lisboa; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

HireHi ищет опытного специалиста по кибербезопасности в Португалии. Ваша задача — обеспечить безопасные жизненные циклы разработки и инфраструктуры в облаке, внедрять IAM, криптографию в транзите и в покое, а также сопровождать команды в безопасном проектировании и реализации.

Требуется 5+ лет опыта, глубокие знания OWASP Top 10, CI/CD Security и MLSecOps, умение работать удалённо и в команде, владение Python и PowerShell. Вакансия предполагает гибридный режим и поддержку профильных сертификаций.

Qualificações

• 5+ лет опыта в кибербезопасности с сильным бэкграундом в безопасности приложений и/или облачной безопасности.
• Опыт внедрения практик безопасности в CI/CD, DevSecOps и MLSecOps.
• Знание OWASP Top 10, сетевых концепций (TCP/IP, OSI) и протоколов.
• Программирование: Python, PowerShell.

Responsabilidades

• Обеспечение безопасных жизненных циклов разработки и инфраструктуры в облаке (AWS/Azure/GCP).
• Интеграция контроля безопасности, тестирования и управления уязвимостями в CI/CD и DevSecOps.
• Работа с командами разработки и платформы для консультирования по безопасному дизайну.

Conhecimentos

English fluency

Teamwork

Independent work

Problem solving

Formação académica

Высшее образование в CS/AI/математика

Сертификаты кибербезопасности

Ferramentas

Python

PowerShell

CI/CD security

Cloud security (AWS/Azure/GCP)

Descrição da oferta de emprego

Задачи

• Secure application development lifecycles and cloud infrastructure by reviewing application code and cloud architectures across AWS, Azure, and GCP;
• Integrate security controls, automated testing, and vulnerability management into CI/CD pipelines and DevSecOps workflows;
• Partner with Application Engineering and Cloud Platform teams as a hands‑on security advisor throughout the development lifecycle;
• Provide guidance on secure design patterns;
• Collaborate with Tech Leads and the Security Champions network to share secure coding practices and run awareness sessions;
• Support security reviews of AI/ML systems and pipelines, assessing risks such as prompt injection, data poisoning, and model supply chain vulnerabilities;
• Lead investigation, mitigation, and recovery efforts for security incidents affecting cloud infrastructure and relevant AI/ML services and inference endpoints;
• Track emerging cybersecurity trends and vulnerabilities, including AI/ML risks;
• Help evolve security controls to address new threats.

Требования

• Bachelor’s or advanced degree in computer science, artificial intelligence, mathematics, or a related field, or professional cybersecurity certifications in lieu of a formal degree;
• At least 5 years of experience as a cybersecurity professional with a strong background in application security and/or cloud security;
• Experience integrating security practices into CI/CD pipelines, code review processes, DevSecOps, and MLSecOps workflows;
• Solid understanding of common web application vulnerabilities and the OWASP Top 10;
• Solid understanding of TCP/IP, LAN/WAN networks, and their security implications;
• Basic familiarity with the seven-layer OSI model;
• Knowledge of security protocols including HTTPS, DNS, SMTP, FTP, and SSH;
• Familiarity with firewalls, IDS, and IPS concepts;
• Understanding of confidentiality, integrity, and availability principles;
• Familiarity with Windows, Linux or Unix, and MacOS;
• Knowledge of incident investigation and response processes;
• Programming experience with Python and PowerShell;
• Familiarity with API security testing and secure coding practices in web application stacks;
• Knowledge of securing AWS, Azure, and GCP environments;
• Familiarity with IAM, encryption in transit and at rest, and shared responsibility models;
• Understanding of securing virtual machines and containerized environments;
• Fluency in English;
• Ability to work independently and transparently with colleagues;
• Strong teamwork skills with colleagues and external partners;
• Individual and team problem‑solving skills;
• Nice to have: Hands‑on exposure to AI/ML security, LLM security, or AI‑driven systems; familiarity with the OWASP LLM Top 10; exposure to AI/ML threat vectors; experience securing AI/ML workloads and managed AI services; relevant security certifications such as CISSP, CEH, CCSP, or OSCP; additional language skills.

Условия

• Competitive salary package;
• Flexible home-working policy and work/life balance;
• Collaborative, fast‑paced, and driven environment;
• Enhesa will sponsor and support an AI security certification such as AAISM or CompTIA SecAI+;
• Equal Opportunity Employer committed to an inclusive environment.