Security Control Engineer
Location: Lisbon, Portugal
Working pattern: 4 days per week onsite
Salary: €50,000 - €75,000, potentially higher for the right candidate
The Role
We’re looking for a Security Control Engineer to join a technical security team responsible for designing, implementing and managing security controls across a range of technologies and environments.
This is a broad role that sits between security engineering, technical consulting, risk and customer engagement. You’ll need enough technical depth to understand how systems are engineered, identify where security risks exist and determine how those risks should be addressed.
This is not a traditional GRC role. Rather than simply interpreting policies or checking compliance requirements, you’ll get into the technical detail behind how security controls work, why they are needed and how they should be implemented.
You’ll also work directly with customers, helping explain technical security concepts, contributing to RFPs and producing technical documentation and presentations.
What You'll Do
- Design, develop and implement security controls across cloud, infrastructure and application environments.
- Assess projects and architectures to identify security risks and appropriate mitigations.
- Apply structured threat modelling approaches to understand potential threats and attack paths.
- Work with engineering teams to determine how security requirements should be implemented in practice.
- Explain the how and why behind security controls and technical security decisions.
- Contribute to the development of security solutions and, where appropriate, build automation or tooling rather than simply relying on third-party products.
- Support customer engagements, technical discussions, RFP responses and security documentation.
- Present technical security concepts and recommendations to customers and other stakeholders.
- Support the wider business continuity programme and related security initiatives.
- Balance security requirements with practical engineering and project considerations.
- Work across different technologies and security domains, developing a broad understanding rather than focusing exclusively on one specialist area.
What We're Looking For
We're interested in people with a strong engineering mindset and broad technical security knowledge.
You don't need to be the deepest technical expert in cloud security, application security or infrastructure, but you should be comfortable getting into the technical detail and understanding how different technologies and security controls work.
You may come from backgrounds such as:
- Security Engineering
- Cloud Security
- DevSecOps
- Infrastructure / Platform Engineering with a security focus
- Application Security
- Technical Customer Engineering
- Security Architecture
- Technical Security Consulting
We're particularly interested in people who can bridge the gap between technical engineering and security.
You'll ideally have:
- Experience working in security engineering, infrastructure, cloud or a related technical environment.
- A good understanding of security principles, controls and risk.
- Experience with threat modelling or structured approaches to identifying security risks.
- Exposure to cloud environments such as AWS, Azure or GCP.
- The ability to understand technical architectures and explain security implications.
- Some experience with scripting, automation or software development such as Python, Go or similar.
- Strong written and verbal communication skills.
- Confidence explaining technical concepts to customers and non-security stakeholders.
- A practical approach to security - understanding both the risk and how to address it technically.
The Person
You don't need to have spent your career in security.
We'd also consider someone from a strong technical engineering background who has developed an interest in security and can demonstrate a good understanding of security principles, risk and controls.
The key is that you're technically credible, curious and able to explain complex concepts clearly.
This could be an excellent next step for someone who wants to develop towards areas such as cloud security, application security or security architecture, without needing to already be a specialist in one of those fields.
What You'll Get
- €50,000 - €75,000 salary, potentially higher for an exceptional candidate
- Broad exposure across security engineering, controls, risk and customer engagements
- Opportunity to work across different technologies and security domains
- A role combining technical security work with customer-facing responsibilities
- The opportunity to develop towards more specialised security engineering or architecture roles
- Lisbon based role with 4 days per week onsite