Security Engineer

Excelia is a multinational company in Consulting, Technology, and Professional Services with over 25 years of experience. We provide services in more than 50 countries across Europe, Latin America, and the United States through our 10 own offices.

Do you have experience in Security Engineering and are you looking for a new challenge? Then this opportunity is for you!

🔹 Position: Security Engineer
📍 Location: Oeiras, Portugal (100% on-site)

Main responsibilities:

• Support the definition, design, procurement/development, and implementation of secure Communications and Information Systems (CIS).

• Ensure compliance with CIS security accreditation policies and maintain appropriate security risk levels.

• Conduct and document security risk assessments and policy compliance to support system accreditation.

• Collaborate with the CTO’s CIS Planning and Implementation Authority (CISPIA) to deliver secure CIS solutions aligned with organizational guidance.

• Integrate cybersecurity measures throughout the full system lifecycle (from design to operation).

• Represent the organization in CIS security governance forums and stakeholder engagements.

• Develop and manage required security accreditation documentation, including:

  • CIS Description

  • Security Accreditation Plan (SAP)

  • Security Risk Assessment (SRA)

  • Security Requirement Statements (SRSt)

  • Security Operating Procedures (SecOPs)

  • Security Test & Verification Plan (STVP)

  • Security Test & Verification Report (STVR)

Mandatory requirements:

• Strong understanding of cybersecurity domains, including:

  • Boundary protection

  • Encryption

  • Identity & access management

  • Monitoring & detection

  • Incident response

  • Vulnerability assessment

• Risk managementIn-depth knowledge of:

  • CIS security principles

  • Networking

  • Vulnerabilities in modern operating systems and applications

• At least 4 years of experience in:

  • Cybersecurity principles, technologies, and best practices

  • CIS security controls (traditional and cloud environments)

  • Designing, implementing, testing, and validating security components

  • Conducting security risk assessments and supporting accreditation processes

  • Identifying threats, vulnerabilities, and residual risks with mitigation recommendations

  • Supporting security accreditation in large-scale CIS projects

  • Using risk assessment methodologies and tools

If you believe you are a good fit, don’t hesitate to apply for this opportunity 😉