SOC 2 & ISO 27001 Security Engineer

Devoteam; Lisboa; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Devoteam Cyber Trust in Portugal is seeking an IT Security & Compliance Engineer to manage identity lifecycles, threat monitoring, and daily audit compliance, ensuring endpoints, cloud accounts, and access controls align with SOC 2 Type 2 and ISO 27001 standards.

You will work on SecOps and governance tasks, collaborating with AWS tools, GitHub Advanced Security, Snyk, and Mimecast to strengthen security across customer environments. This is a full-time role in Lisbon, Portugal.

Qualificações

• Hands-on IT security/compliance roles with SOC 2 Type 2 and ISO 27001 experience.
• Experience with Microsoft Entra ID and Intune MDM policies.
• Proficient in AWS security services and code/container scanners.
• Familiarity with security operations (L1/L2) and incident response.
• Ability to collect daily audit evidence for compliance.

Responsabilidades

• Identity Operations & Endpoint Security: Manage user access lifecycles, enterprise credential tools, and apply security policies across all endpoints.
• SecOps & Threat Management: Oversee L1/L2 security operations, triage vulnerabilities, and maintain continuous security monitoring.
• Daily Compliance & Audit Evidence: Collect, organize, and validate daily audit evidence to satisfy SOC 2 Type 2 and ISO 27001.
• Cloud & Pipeline Monitoring: Monitor AWS native security tooling and support code/container scanning integrations.
• Communication Gateway Protection: Administer email protection tools and compliance automation platforms.
• Cloud Security (AWS): GuardDuty, Security Hub, Inspector, IAM Identity Center, KMS
• Code & Container Security: GitHub Advanced Security, Snyk, Amazon ECR
• Email Protection & Compliance: Mimecast, Automated Compliance Platforms (e.g., Drata, Vanta)

Conhecimentos

Microsoft Entra ID

Intune MDM policies

SOC 2 Type 2

ISO27001

AWS Security Tools

Snyk/ECR

GitHub Advanced Security

Email protection tools

Ferramentas

GuardDuty

Security Hub

Inspector

IAM Identity Center

KMS

Descrição da oferta de emprego

Devoteam Cyber Trust in Portugal is seeking an IT Security & Compliance Engineer to manage identity lifecycles, threat monitoring, and daily audit compliance, ensuring endpoints, cloud accounts, and access controls align with SOC 2 Type 2 and ISO 27001 standards.

You will work on SecOps and governance tasks, collaborating with AWS tools, GitHub Advanced Security, Snyk, and Mimecast to strengthen security across customer environments. This is a full-time role in Lisbon, Portugal.