Cybersecurity Analyst

We are looking for an experienced Cybersecurity Analyst with at least 4 years of hands-on experience to strengthen our security posture by proactively identifying risks and vulnerabilities, supporting the definition of security architectures, and recommending effective mitigation strategies.

The successful candidate will play a critical role in protecting organizational assets by monitoring security events, responding to incidents, conducting in-depth analyses, and producing clear, actionable reports for both technical and non-technical stakeholders.

This role requires strong analytical capabilities, a proactive mindset, and the ability to operate effectively in fast-paced and security-critical environments.

Key Responsibilities

• Identify, assess, and prioritize cybersecurity risks and vulnerabilities across systems, networks, and applications.
  
• Support the definition and implementation of security requirements, controls, and best practices aligned with organizational policies.
  
• Monitor security alerts and events using SIEM and other security tools.
  
• Lead or support incident detection, investigation, containment, and remediation activities.
  
• Conduct root cause analyses and recommend preventive measures.
  
• Perform security assessments, vulnerability scans, and risk analyses.
  
• Collaborate with IT, engineering, and infrastructure teams to ensure secure solution design and deployment.
  
• Contribute to the development and continuous improvement of security processes, playbooks, and response procedures.
  
• Produce clear and structured reports on incidents, threats, and risk exposure.
  
• Stay up to date with emerging threats, attack vectors, and cybersecurity trends.
  
• Support audit activities and help ensure compliance with relevant security frameworks and standards.
  

Requirements

• 4+ years of experience in cybersecurity roles such as Cybersecurity Analyst, Security Operations, Blue Team, or similar.
  
• Proven experience in risk identification, vulnerability management, and mitigation strategies.
  
• Strong background in incident detection, response, analysis, and reporting.
  
• Solid understanding of:
  

• Network security principles
  
• Threat intelligence
  
• Security monitoring tools
  
• Vulnerability management platforms
  
• Identity and access management
  
• Endpoint protection technologies
  

• Familiarity with security frameworks and standards (e.g., ISO 27001, NIST, CIS).
  
• European citizenship (mandatory), with availability to work aligned with the Portugal timezone.
  
• Fluent English, both written and spoken.
  

• CISSP, CISA, CISM, GSEC, GCCC, CEH, ECSA, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer.