Cyber Security Expert – Application Security & Incident Management

About the role

We are looking for a highly skilled Cyber Security Expert to join our Lisbon team. The role focuses on application security, IT security compliance, and incident management across both project and production environments.

Key responsibilities

• Implement and maintain Secure Software Development Life Cycle (Secure SDL) practices, including DevSecOps and threat modeling.
• Manage application‑level vulnerability programs using SAST, DAST and Software Composition Analysis (SCA).
• Conduct security risk assessments, ensure compliance with standards such as NIST, CIS and ISO2700x, and address regulatory requirements (HKMA, MAS, FSC, DORA, FINMA).
• Coordinate with regional and global IT security teams, handle cyber alerts, investigate incidents and ensure resolution.
• Oversee production vulnerability management, maintain SIEM onboarding, and report compliance status to senior security leaders.

Required profile

• Strong expertise in application security, Secure SDL and vulnerability management (SAST, DAST, SCA).
• In‑depth knowledge of IT security compliance frameworks and relevant regulations.
• Proven experience in cybersecurity incident management and handling alerts.
• Advanced understanding of vulnerability management tools and processes.
• Fluent English (expert level) and basic French.

Required skills

• Secure Software Development Life Cycle (Secure SDL)
• DevSecOps
• Threat modeling
• SAST, DAST, Software Composition Analysis (SCA)
• Vulnerability Management
• SIEM onboarding and monitoring
• NIST, CIS, ISO2700x standards