Cyber security engineer in cloud environments

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

• Deliver a diverse portfolio of cybersecurity projects and services to multiple clients across various industry sectors.
• Conduct comprehensive technical cybersecurity audits, assessments, and vulnerability analyses.
• Develop and align our clients' cybersecurity posture with relevant industry standards, regulations, and best practices.
• Design, implement, and optimise cybersecurity solutions and controls, providing expert guidance.
• Design, implement, and optimise security controls across on-premises and multi-cloud environments (AWS, Azure, and GCP).
• Support cybersecurity risk management processes.
• Support the end-to-end vulnerability lifecycle, from identification and prioritisation to technical remediation and validation.
• Develop and test incident response plans, providing hands-on support during incidents.
• Support the deployment, configuration, and tuning of cybersecurity monitoring solutions and analyse cybersecurity events and alerts.
• Create clear reports on findings, risks, and remediation recommendations.
• Develop and deliver cybersecurity awareness training.

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Proven experience as a Cybersecurity Engineer or similar role.
• Cybersecurity audits, assessments, and vulnerability analysis.
• Designing, implementing, and optimising cybersecurity solutions.
• On-premises and cloud (AWS, Azure, and GCP) infrastructure architecture and hardening.
• IAM principles and solutions.
• Risk management lifecycle.
• Vulnerability management lifecycle.
• Incident response lifecycle.
• Knowledge of security standards/frameworks (ISO 27001/27701, NIST, CIS, SOC 2).
• Experience in creating and delivering engaging cybersecurity awareness training and materials.
• Great organisational, analytical, and problem-solving skills.
• Strong sense of ethics, integrity, and responsibility.
• Great communication and teamwork skills.
• Fluency in Portuguese and high proficiency in English.
• Будет плюсом: Relevant industry certifications such as CISSP, CISM, CISA, CompTIA Security+, CEH, ISO 27001 Lead Implementer/Auditor, or specific vendor cybersecurity certifications are highly valued; Experience with a variety of cybersecurity technologies and tools, including advanced firewalls, Web Application Firewalls (WAF), IDS/IPS, EDR/XDR platforms, Data Loss Prevention (DLP) tools, SIEM solutions, and cloud-native cybersecurity services (AWS, Azure, GCP) is highly valued; Understanding of AI/ML principles, including their applications and cybersecurity implications; Proficiency in scripting languages (e.g., Bash, Python, PowerShell) for cybersecurity automation, tool integration, or data analysis is highly valued; Participation in cybersecurity communities, forums, or professional networks

• Условий в вакансии нет