About
Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.
Responsibilities
•Deliver a diverse portfolio of cybersecurity projects and services to multiple clients across various industry sectors.
•Conduct comprehensive technical cybersecurity audits, assessments, and vulnerability analyses.
•Develop and align clients' cybersecurity posture with relevant industry standards, regulations, and best practices.
•Design, implement, and optimise cybersecurity solutions and controls, providing expert guidance.
•Design, implement, and optimise security controls across on-premises and multi-cloud environments (AWS, Azure, and GCP).
•Support cybersecurity risk management processes.
•Support the end-to-end vulnerability lifecycle, from identification and prioritisation to technical remediation and validation.
•Develop and test incident response plans, providing hands-on support during incidents.
•Support the deployment, configuration, and tuning of cybersecurity monitoring solutions and analyse cybersecurity events and alerts.
•Create clear reports on findings, risks, and remediation recommendations.
•Develop and deliver cybersecurity awareness training.
Requirements
•Bachelor’s degree in Computer Science, Information Technology, or a related field.
•Proven experience as a Cybersecurity Engineer or similar role.
•Cybersecurity audits, assessments, and vulnerability analysis.
•Designing, implementing, and optimising cybersecurity solutions.
•On-premises and cloud (AWS, Azure, and GCP) infrastructure architecture and hardening.
•IAM principles and solutions.
•Risk management lifecycle.
•Vulnerability management lifecycle.
•Incident response lifecycle.
•Knowledge of security standards/frameworks (ISO 27001/27701, NIST, CIS, SOC 2).
•Experience in creating and delivering engaging cybersecurity awareness training and materials.
•Great organisational, analytical, and problem-solving skills.
•Strong sense of ethics, integrity, and responsibility.
•Great communication and teamwork skills.
•Fluency in Portuguese and high proficiency in English.
Nice to have
•Relevant industry certifications such as CISSP, CISM, CISA, CompTIA Security+, CEH, ISO 27001 Lead Implementer/Auditor, or specific vendor cybersecurity certifications are highly valued.
•Experience with a variety of cybersecurity technologies and tools, including advanced firewalls, Web Application Firewalls (WAF), IDS/IPS, EDR/XDR platforms, Data Loss Prevention (DLP) tools, SIEM solutions, and cloud-native cybersecurity services (AWS, Azure, GCP) is highly valued.
•Understanding of AI/ML principles, including their applications and cybersecurity implications.
•Proficiency in scripting languages (e.g., Bash, Python, PowerShell) for cybersecurity automation, tool integration, or data analysis is highly valued.
•Participation in cybersecurity communities, forums, or professional networks.
Conditions
No conditions are stated in the posting.
