Security Engineer – Vulnerability Management & AI-Driven Security Operations (f/m/div.)

Bosch Portugal; Braga; On-site; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Health insurance

Hybrid work system

Free parking

Canteen

On-site medical office

Job summary

Bosch Portugal is seeking a Security Engineer at the Braga R&D Center to strengthen product cybersecurity by integrating vulnerability management, product security, and AI-driven automation. You will collaborate with PSIRT and cross-functional teams to build secure automotive software solutions.

The role emphasizes advanced Python automation, CI/CD and data engineering fundamentals, and a proactive mindset towards emerging AI technologies. Hybrid work and health benefits accompany the position.

Qualifications

• Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security or related discipline.
• Experience in cybersecurity, Product Security, Vulnerability Management, Security Operations or software engineering.
• Automotive software engineering experience is a plus.
• Strong Python skills with automation.
• Knowledge of CI/CD and data engineering fundamentals.
• Understanding of LLMs, RAG, prompt engineering and AI agents.
• Knowledge of Secure Development Lifecycle is advantageous.

Responsibilities

• Monitor, assess and prioritize vulnerabilities from internal and external sources.
• Perform vulnerability triage, risk assessment and impact analysis.
• Coordinate vulnerability management with development and product teams.
• Develop Python-based automation for security use cases such as SecBOM analysis and CVE enrichment.
• Build AI copilots and agent-based workflows for vulnerability management and security analysis.
• Apply LLMs, prompt engineering and Retrieval-Augmented Generation to improve security knowledge management.
• Automate repetitive security activities and support security analytics and dashboards.

Skills

Python

CI/CD

Data engineering fundamentals

LLMs / AI agents

RAG

Education

Bachelor's or Master's in Computer Science / Software Engineering / Cybersecurity or related field

Job description

The Bosch Group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people’s lives and to work towards a more sustainable future.

Bosch Car Multimedia, S.A. belongs to the Automotive Electronics division and is focused on making the vehicles our third living space. The company' success lies in its highly specialized and innovative team, and on the technological know-how which makes Bosch the leading supplier in the automotive market.

At the Bosch Research & Development Center in Braga, more than 350 engineers develop car multimedia solutions and the most innovative localization, perception and safety sensors that are helping to shape connected and autonomous mobility. From hardware to software to physics, we have all kinds of opportunities waiting for you.

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people’s lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.

Job Description

Your contribution to something big:

How can we make Bosch products more secure while making Security Operations smarter and more efficient?

As a Security Engineer, you will strengthen the cybersecurity resilience of Bosch products by combining Vulnerability Management, Product Security and AI-driven automation. You will help identify, assess and prioritize vulnerabilities while developing intelligent solutions that reduce manual effort and support security teams in their daily work.

You will collaborate with development teams, Product Security Incident Response Teams (PSIRT) and cybersecurity organizations across Bosch.

Vulnerability Management & Product Security

• Monitor, assess and prioritize vulnerabilities from internal and external sources.
• Perform vulnerability triage, risk assessment and impact analysis.
• Coordinate vulnerability management with development and product teams.
• Support security incident handling and vulnerability disclosure processes.
• Track vulnerabilities throughout their lifecycle and continuously improve related processes.
• Support vulnerability monitoring before and after Start of Production (SOP).

AI-Driven Security Operations & Automation

• Develop Python-based automation for security use cases such as SecBOM analysis, CVE enrichment and security finding prioritization.
• Build AI copilots and agent-based workflows for vulnerability management and security analysis.
• Apply LLMs, prompt engineering and Retrieval-Augmented Generation (RAG) to improve security knowledge management.
• Evaluate emerging AI technologies and their application to Product Security.
• Automate repetitive security activities and support security analytics and dashboards.

Qualifications

What distinguishes you:

Education: Bachelor's or Master's degree in Computer Science, Software Engineering, Cybersecurity, Information Security or a related discipline.

Experience

• Experience in cybersecurity, Product Security, Vulnerability Management, Security Operations or software engineering.
• Experience in automotive software engineering or customer projects is a plus.

Know-how

• Advanced Python skills and experience with automation.
• Knowledge of CI/CD and data engineering fundamentals.
• Understanding of LLMs, RAG, prompt engineering and/or AI agents.
• Knowledge of Product Security, incident handling, security risk assessment or Secure Development Lifecycle is an advantage.

Working Style and Methods

• Analytical, structured and solution-oriented.
• Able to coordinate topics and collaborate across teams.
• Proactive mindset with an interest in automation and emerging technologies.

Personality

• Strong team player and clear communicator.
• Confident working with technical and business stakeholders.
• Curious, collaborative and willing to take ownership.

Languages: Good command of English.

Additional Information

Work includes:

Flexible work conditions

Hybrid work system

Exchange with colleagues around the world

Health insurance

Medical office (psychology and general clinic) & Social Services Office on site

Training opportunities (p.e., technical training, foreign languages training) & certifications

Opportunities for career progression and continuous professional development

Access to great discounts in partnerships and Bosch products

Sports and health related activities

Flexible benefits platform

Great access to public transports

Free transport from Porto

Free parking lot

Canteen

Success stories don´t just happen. They are made...