Lead Security Engineer

Há 1 semana

Lisboa, Portugal Tempo integral

Randstad Digital is currently searching for a talented Lead Security Engineer to join the team of one of our prestigious clients.
Reporting to the Head of Security Engineering, the Lead Security Engineer plays a critical role within the Global Cyber Security & Risk Team.
This is an exciting opportunity to join a greenfield cyber transformation and help build a world-class Cyber Security Centre of Excellence within a global manufacturing organisation. The Security Engineering team will set a new benchmark for cyber security across the business, embedding security into technology, cloud platforms, applications, and data from the outset.
Success in this role requires a passion for cyber security, a strong engineering mindset, and the ability to collaborate with teams across multiple regions and cultures. You will act as a trusted security advisor, helping regional technology teams design, build, and operate secure solutions while driving the adoption of "Security at the Core" principles.
Purpose of the Role
The Lead Security Engineer (LSE) works closely with technology teams across designated regions, providing security engineering expertise and acting as a trusted partner throughout the technology lifecycle.
The role is responsible for embedding security into technology design, implementation, and operations across both cloud and on-premise environments. Working as part of the Security Engineering Centre of Excellence, the LSE will empower regional teams to build secure systems, applications, and processes through expert guidance, technical leadership, and collaboration.
The successful candidate will play a key role in protecting the organisation's assets, data, customers, and reputation by proactively identifying, managing, and reducing cyber security risks whilst enabling business growth and innovation.
responsabilidades chave
Security Engineering
Secure design, implementation, and operation of technology platforms across cloud and on-premise environments.
Security Principles & Governance
Driving the adoption of security standards, best practices, and secure-by-design methodologies across the organisation.
Data Security
Protecting business-critical and sensitive information throughout its lifecycle.
Application Security
Ensuring applications are designed, developed, tested, and deployed securely.
Risk Mitigation
Identifying, assessing, and reducing security risks through effective engineering controls and security improvements.
Key Responsibilities
Cyber Security Leadership
Stay current with emerging cyber threats, vulnerabilities, attack techniques, and industry best practices.
Translate security trends and intelligence into actionable improvements and recommendations.
Promote and foster a culture of cyber security awareness, accountability, and responsibility across technology teams.
Advocate cloud-native security capabilities and modern security engineering approaches that deliver maximum value to the business.
Act as a security subject matter expert and trusted advisor to regional and global technology stakeholders.
Security Engineering
Ensure cloud platforms and on-premise systems align with secure design principles and industry best practices.
Design, implement, and maintain security controls across infrastructure, platforms, and services.
Ensure secure configuration of cloud resources and enterprise infrastructure.
Develop scalable security solutions aligned to business and technical requirements.
Lead the adoption and continuous improvement of security standards, policies, and technical controls.
Support security reviews and assessments for new and existing technology solutions.
Data Security
Identify and classify information based on business value, sensitivity, and regulatory requirements.
Implement and maintain data security controls throughout the entire data lifecycle.
Ensure data is appropriately protected during creation, storage, transmission, use, sharing, and disposal.
Implement solutions such as:
Encryption at rest and in transit
Data Loss Prevention (DLP)
Access controls
Data masking
Information protection technologies
Monitor developments in data security technology and integrate appropriate improvements into the organisation's strategy.
Application Security
Implement application security controls and secure development practices.
Support vulnerability assessments and penetration testing activities.
Promote secure coding principles and best practices.
Work with development and technology teams to identify and address security weaknesses early in the development lifecycle.
Support continuous improvement of application security maturity across the organisation.
Risk Management & Security Improvement
Translate business and project requirements into secure, scalable solutions.
Identi