обновлено 7 дней назад
Security Engineering Lead (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Engineering Lead (Cybersecurity): Leading the regional Detection, Analysis, and Response Team (DART) in Portugal to oversee incident response and threat mitigation with an accent on cloud security, network forensics, and complex intrusion investigation. Focus on managing security workflows, automating response playbooks, and providing technical mentorship within a global marketplace environment.
Location: Hybrid role based at the office in Porto, Portugal
Company
operates a global luxury fashion marketplace and develops technology for e-commerce experiences connecting customers, brands, boutiques, and department stores.
What you will do
- Lead the Porto Detection, Analysis, and Response Team and oversee regional security response operations.
- Coordinate responses to complex security anomalies, intrusion attempts, and breaches across Coupang and environments.
- Lead root-cause analysis, executive reporting, threat hunting, and detection improvements across cloud, endpoint, and network environments.
- Act as the final SOC escalation point while mentoring senior engineers and analysts.
- Improve incident response policies, automated playbooks, and SOC operating processes.
- Oversee the on-call rotation to maintain 24/7 response readiness.
Requirements
- Approximately 10 years of information security experience, including at least 7 years in cyber security incident response or digital forensics.
- Experience in a lead or managerial role within a global or regional organization.
- Advanced hands-on experience with AWS, Azure, or other major cloud environments.
- Expertise in Windows/Linux investigations, EDR, HIPS, DLP, SaaS logs, SIEM platforms, and high-volume log analysis.
- Ability to automate response workflows using Python, Bash, or PowerShell, with knowledge of web security mitigation using Akamai or Cloudflare.
- Deep understanding of Kubernetes, Docker, network forensics, packet analysis, and custom SIEM detection use cases. Fluency in English is required.
Nice to have
- Portuguese or Korean proficiency.
- Advanced certifications such as GCIH, GCFA, GNFA, CISSP, or OSCP.
- Degree in Computer Science, Cybersecurity, or equivalent practical experience.
Culture & Benefits
- Health insurance covering the whole family.
- Flexible working environment with well-being support and tools.
- Extra days off, a sabbatical program, and community contribution days.
- Training opportunities and a flexible benefits program.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →