Senior Security Engineer And Grc Specialist

Phiture; Santarém; Presencial; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

Uma empresa de consultoria global está buscando um Engenheiro de Segurança, responsável por implementar práticas de segurança adequadas e cumprir normas essenciais como NIS2 e GDPR. O candidato ideal deve ter uma forte experiência em cibersegurança e um entendimento profundo das regulamentações pertinentes, além de habilidades de comunicação eficazes para traduzir conceitos complexos em orientações práticas.

Qualificações

• 8–12 anos de experiência em cibersegurança com experiência em GRC e engenharia prática.
• Forte entendimento das regulamentações NIS2, GDPR, ISO 27001 e NIST.
• Certificações como CISSP, CRISC, CISA ou ISO/IEC 27001 Lead Auditor são um plus.

Responsabilidades

• Aplicar linhas de base de configuração segura e endurecimento em sistemas operacionais e plataformas de nuvem.
• Contribuir para a busca de ameaças e a análise de causas raiz.
• Atuar como conselheiro interno sobre as melhores práticas de segurança.

Conhecimentos

Segurança cibernética

Comunicação clara

Pensamento estratégico

Formação académica

Bacharel em Segurança da Informação ou Ciência da Computação

Ferramentas

SIEM

EDR

vulnerability scanners

Descrição da oferta de emprego

At emagine Portugal, we believe in the power of talent to drive innovation. As a global consulting company, we connect top professionals with some of the most exciting and technologically advanced projects across Europe. With a strong presence in Portugal, we are committed to delivering value through expertise, collaboration, and agility.

What You'll Be Doing: Security Engineering Apply secure configuration baselines and hardening across OS, databases, and cloud platformsAutomate security processes to boost efficiency and reduce manual effortSupport security and vulnerability assessments and patch implementationContribute to threat hunting, root cause analysis, and incident responseRisk, Compliance & Governance Identify and assess IT security risks; design and monitor mitigation strategiesDefine and enforce security policies, standards, and proceduresEnsure compliance with key regulations and frameworks: NIS2, GDPR, ISO 27001, NIST, IEC 62443, Chinese cybersecurity regulationsPerform third-party risk assessmentsSupport implementation of business continuity and incident response plansCollaboration & Communication Act as a trusted advisor to internal teams on security best practicesTranslate complex security concepts into actionable guidance for both technical and non-technical audiences What We're Looking For: Bachelor's degree in Information Security, Computer Science, or related field8–12 years of experience in cybersecurity, with both GRC and hands-on engineering backgroundStrong understanding of NIS2, GDPR, ISO 27001, NIST, and Chinese data/cybersecurity regulationsWorking knowledge of Azure, AWS, or OCI cloud security servicesExperience with tools like SIEM, EDR, vulnerability scanners, and cloud-native security controlsSolid grasp of IAM concepts (SSO, MFA, PAM, access reviews)Familiarity with GRC tools, risk assessments, and data protection best practicesCertifications such as CISSP, CRISC, CISA, or ISO/IEC 27001 Lead Auditor are a strong plus What Sets You Apart: Strong technical depth and hands-on engineering mindsetStrategic thinking with a pragmatic, solutions-oriented approachClear and persuasive communication across stakeholdersAdaptability to evolving threats, technologies, and regulations Interested? Send your application to ******