Technical Security Analyst

Decskill; Lisboa; Híbrido; EUR 42 000 - 62 000; Tempo integral

Resumo da oferta

An IT consulting company in Lisbon is seeking a Technical Security Analyst to conduct technical analysis of security reports and monitor remediation plans. The ideal candidate should have over 3 years of experience in cybersecurity, strong knowledge of attack concepts, and be fluent in English. This role involves liaising with different teams to ensure smooth operations and reporting to governance levels. Interested candidates should send their CV to the specified email address.

Qualificações

• More than 3 years of experience in cybersecurity roles.
• Strong knowledge of attack concepts and techniques.
• Experience analyzing Redteam/Pentest reports.
• Experience analyzing Redteam/Pentest reports.
• Master security requirements: IAM/PAM, monitoring, hardening, secure architecture, patch & vulnerability management.
• Ability to analyze technical evidence (logs, configurations, scans…), challenge experts, and simplify complex topics.
• Fluent in English (mandatory) and notions of French (a plus).

Responsabilidades

• Analyze various security exercise reports for vulnerabilities.
• Monitor remediation plans and track action plans.
• Prepare structured reporting for different governance levels.
• Monitoring of Remediation Plans.
• Help entities understand findings, their impact, and remediation expectations.
• Review, assess, and challenge remediation plans proposed by entities.
• Ensure overall follow-up of action plans resulting from security reviews.
• Evaluate the quality and relevance of evidence provided (configurations, logs, scans, technical artifacts…).
• Consolidate progress, analyze blockers, and produce reliable summaries for governance.
• Prepare clear and structured reporting for different levels of the Group.
• Coordinate Reviews with Entities.
• Contribute to coordinating the different stages of reviews: scoping, kickoff, restitution, and follow‑up.
• Ensure communication with entities and the flow of information necessary for smooth execution.
• Cross‑functional Contribution: participate in improving SRM04 processes, tools, and methodologies.
• Coordinate between teams (technical, Redteam, ISA, CyberProgram, Audit…) to ensure consistency.

Conhecimentos

Cybersecurity expertise

Report analysis

Technical evidence analysis

Communication

Evidence analysis (logs/configs/scans)

French (notions)

Formação académica

Bachelor or master’s in engineering, Computer Science, Management

Descrição da oferta de emprego

Decskill, founded in 2014 as an IT Consulting Company, places paramount importance on its greatest asset: its people. Our main mission is to deliver value through knowledge and talent, and we achieve this by fostering a culture of excellence and investing in the development and well-being of our people. With over 600 dedicated professionals and offices in Lisbon, Porto, Madrid, and Luxembourg, Decskill operates across three core areas:

Decskill Talent: We believe that our people are key to our success.

Through Decskill Talent, we empower our team to embrace the digital transformation challenges of our clients. We collaborate with clients to drive innovation, ensuring project success and business growth.

Decskill Boost: Equipping our team with the latest tools and methodologies, we optimize Time-to-Market and deliver innovative solutions exceeding client expectations.

Decskill Connect: Our team collaborates closely with clients to implement and manage IT infrastructures that generate long‑term value.

At Decskill, we believe that by nurturing and empowering our people to confront the challenges of digital transformation, we create value not only for our clients but also for our entire ecosystem, fostering a digital community dedicated to growth and progress.

We are looking for a Technical Security Analyst for a project in Lisbon (hybrid).

Responsibilities:

• Technical Analysis of Security Reports:
• Analyze various security exercise reports (penetration tests, Redteam, technical assessments…).
• Identify major vulnerabilities and weaknesses.
• Assess the relevance of technical conclusions and provide tailored recommendations.
• Monitoring of Remediation Plans
• Help entities understand findings, their impact, and remediation expectations.
• Review, assess, and challenge remediation plans proposed by entities.
• Ensure overall follow-up of action plans resulting from security reviews.
• Evaluate the quality and relevance of evidence provided (configurations, logs, scans, technical artifacts…).
• Consolidate progress, analyze blockers, and produce reliable summaries for governance.
• Prepare clear and structured reporting for different levels of the Group.
• Coordination of Reviews with Entities
• Contribute to coordinating the different stages of reviews: scoping, kickoff, restitution, and follow‑up.
• Ensure communication with entities and the flow of information necessary for smooth execution.
• Cross‑functional Contribution
• Participate in the continuous improvement of SRM04 processes, tools, and methodologies.
• Contribute to coordination between teams involved in the different lines of defense (technical teams, Redteam, ISA, CyberProgram, Audit…) to ensure consistency, information sharing, and avoid duplication.

Requirements:

• Bachelor or master’s in engineering, Computer Science, Management, or related fields.
• More than 3 years of experience in cybersecurity (pentesting, technical audit, SOC/IR, security assessment…).
• Strong knowledge of attack concepts and techniques (MITRE ATT&CK, exploitation, post‑exploitation…).
• Experience analyzing Redteam/Pentest reports.
• Master security requirements: IAM/PAM, monitoring, hardening, secure architecture, patch & vulnerability management;
• Hability to analyze technical evidence (logs, configurations, scans…), challenge experts, and simplify complex topics;
• Fluent in English (mandatory) and notions of French (is a plus)

If you’re interested in this job please send your CV in English to [e-mail] with reference “MF/TSEC”

Decskill is committed to equality and non‑discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.