Gamdom
GuestWorld
Senior Security Lead (m/f)
Automatic translation. Check the original.
About the opportunity
We are GuestWorld, a company specializing in outsourcing and human resources development. We are guided by a culture of excellence and promote a positive environment, aligning our clients' objectives with our people's motivation. We focus on effective solutions, continuous training, and partnerships based on trust and value creation.
Responsibilities
- Define the organization's security strategy and roadmap;
- Assume responsibility for the security architecture of critical infrastructures;
- Lead high-impact security incidents and coordinate the response;
- Design and implement a security governance model;
- Conduct Purple Team exercises, promoting collaboration between Red Team and Blue Team;
- Collaborate with architecture teams in defining and adopting secure design patterns;
- Lead compliance and audit programs, covering multiple benchmarks and frameworks;
- Define security metrics and KPIs for presentation to leadership;
- Represent the security area in meetings with stakeholders;
- Manage relationships with security vendors, as well as tool evaluations and selection;
- Drive security innovation, including DevSecOps, shift-left, and security process automation.
Requirements
- Degree in Computer Engineering or similar fields (preferred);
- Security architecture, covering the entire organization and multi-cloud environments;
- Development of security programs, including policies, standards, and procedures;
- Advanced penetration testing and Red Team techniques, using the MITRE ATT&CK framework;
- Security orchestration and automation, including SOAR and runbook automation;
- Data protection and Privacy Engineering, including encryption, DLP, and data governance;
- Distributed systems security (e.g., microservices, service mesh, and Zero Trust architectures);
- Cloud-Native security, including CSPM, CWPP, container security, and serverless environments;
- Regulatory compliance, including SOC 2, ISO 27001, GDPR, DORA, PCI DSS, and HIPAA;
- Security operations, including SOC design and evolution, SIEM optimization, and threat hunting;
- Large-scale identity and access management, including enterprise SSO and identity federation.
Preferred Certifications
- CISSP;
- OSCP;
- GIAC;
- Cloud Security.
Benefits
- Competitive salary and benefits package;
- Continuous training and specific certifications;
- Opportunity for professional growth and development;
- Dynamic and collaborative work environment;
- Growing company with a promising future.
* See how we handle your data at guestworld.pt
