Cybersecurity Analyst

About the role

Komodo Consulting is seeking a Cybersecurity Analyst to join a technology‑company project based in Lisbon. The position is hybrid, requiring attendance at the office twice a week, and focuses on detection, vulnerability management, incident response and security automation.

Key responsibilities

• Own the detection lifecycle in the XDR platform, building, maintaining and tuning detection rules while triaging security events.
• Perform vulnerability assessments across the infrastructure, analyse findings, produce clear reports and drive remediation with relevant teams.
• Serve as a security reference point, raise awareness and collaborate with engineering to embed threat modelling into development.
• Support incident response from containment through recovery, document findings and translate lessons learned using frameworks such as MITRE ATT&CK.
• Develop automation scripts and tools, applying Infrastructure as Code principles to manage and integrate security tooling at scale.
• Contribute to the evolution of internal security processes and evaluate emerging solutions to continuously raise security standards.

Required profile

• Minimum three years of hands‑on experience in at least two cybersecurity domains.
• Strong communication skills in English (B2 level or higher) and ability to work in a fully English‑speaking environment.
• Willingness to work on‑site in Lisbon two days per week.

Required skills

• Experience with XDR platforms such as Palo Alto or CrowdStrike.
• Proficiency with vulnerability management tools like Tenable or Qualys.
• Scripting in Python or Bash for automation.
• Solid knowledge of Linux, macOS and Windows operating systems.
• Understanding of networking concepts and cloud platforms (AWS, GCP).
• Familiarity with Infrastructure as Code principles.
• Basic knowledge of security frameworks such as MITRE ATT&CK, NIST and CIS.
• API‑based automation experience (plus).