Cyber Security Operations Engineer (Hybrid – Lisbon)

About the role

We are looking for a Cyber Security Operations Engineer to join TLScontact’s security team in Lisbon. Working hybrid with one day per week on‑site, you will help protect our digital assets, support government‑related services and drive continuous improvement of our security posture.

Key responsibilities

• Respond to security incidents, conduct investigations and produce root‑cause analysis.
• Coordinate with IT and business teams to mitigate and resolve incidents.
• Perform regular vulnerability assessments, penetration testing and prioritize remediation.
• Operate, administer and troubleshoot security tools such as anti‑malware, SIEM, web and email proxies, CASB, encryption and GPO.
• Maintain central log management, asset inventory and ensure compliance evidence is collected.
• Conduct daily log reviews, security audits and support patch and vulnerability management processes.
• Implement endpoint protection policies, hardening configurations and deliver security awareness training.

Required profile

• Proven experience in security operations, incident response and vulnerability management.
• Ability to work collaboratively with cross‑functional IT teams.
• Strong analytical skills and attention to detail.

Required skills

• SIEM platforms
• Anti‑malware solutions
• Web and email proxy technologies
• Cloud Access Security Broker (CASB)
• Encryption technologies
• Group Policy Objects (GPO) management
• Vulnerability assessment and penetration testing
• Patch and vulnerability management
• Log management and asset inventory
• Endpoint protection and hardening