security engineer

The Bosch group operates globally with over 400,000 employees across 60 countries, focusing on inventing technologies and services to improve quality of life. The Lisbon-based entity serves as a central hub for the group, providing essential services in accounting, procurement, communications, legal, and marketing, while maintaining a leadership position in information technology and industrial consultancy.

• Design and implement secure cloud architectures, primarily on Microsoft Azure;
• Develop, deploy, and manage security controls, policies, and procedures;
• Monitor cloud environments to detect and respond to threats, vulnerabilities, and incidents;
• Perform risk assessments and vulnerability scans, ensuring timely remediation;
• Ensure compliance with industry standards and security frameworks;
• Implement and manage Identity and Access Management (IAM), including RBAC models;
• Secure cloud networking components such as VNets, firewalls, and private endpoints;
• Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps);
• Respond to security incidents and conduct root cause analysis;
• Maintain clear and up-to-date documentation of security architecture and processes.

• Degree in Computer Science, Information Security, or a related field;
• Minimum of 5 years of experience in IT Security with a strong focus on Cloud Security;
• Hands-on experience with Microsoft Azure security services like Defender for Cloud and Key Vault;
• Strong understanding of cloud architecture and security best practices;
• Experience with identity management solutions including Azure AD, MFA, and Conditional Access;
• Solid knowledge of network security concepts such as firewalls, VPNs, and Zero Trust;
• Familiarity with scripting and automation using PowerShell, Python, or similar;
• Experience with security monitoring tools and SIEM solutions;
• Good understanding of compliance and regulatory requirements;
• Fluent in English (written and spoken);
• Analytical mindset with strong problem-solving skills, proactive and detail-oriented approach, and strong collaboration skills;
• Nice to have: Experience with AWS or Google Cloud Platform, knowledge of container security (Docker, Kubernetes), experience with Infrastructure as Code (Terraform, ARM, Bicep), exposure to endpoint security and threat intelligence tools, relevant certifications (e.g., AZ-500).

• Flexible work conditions;
• Exchange with colleagues around the world;
• Health insurance and medical office on site;
• Training opportunities and certifications;
• Opportunities for career progression and continuous professional development;
• Access to discounts in partnerships;
• Sports and health-related activities;
• Access to public transport;
• Free parking lot;
• Canteen.