CIS Security Engineer (holding NATO Security Clearance)- Deadline 06/05/26

• Support the definition, design, procurement/development, and implementation of secure Communications and Information Systems (CIS).

• Ensure compliance with CIS security accreditation policies and maintain appropriate security risk levels.

• Conduct and document security risk assessments and policy compliance to support system accreditation.

• Collaborate with the CTO’s CIS Planning and Implementation Authority (CISPIA) to deliver secure CIS solutions aligned with organizational guidance.

• Integrate cybersecurity measures throughout the full system lifecycle (from design to operation).

• Represent the organization in CIS security governance forums and stakeholder engagements.

• Develop and manage required security accreditation documentation, including:

  • CIS Description

  • Security Accreditation Plan (SAP)

  • Security Risk Assessment (SRA)

  • Security Requirement Statements (SRSt)

  • Security Operating Procedures (SecOPs)

  • Security Test & Verification Plan (STVP)

  • Security Test & Verification Report (STVR)

Education & Experience

• Bachelor’s degree in a relevant field + minimum 4 years of related experience,
  OR

• No degree, but at least 8 years of extensive, progressive relevant experience.

Technical Knowledge

• Strong understanding of cybersecurity domains, including:

  • Boundary protection

  • Encryption

  • Identity & access management

  • Monitoring & detection

  • Incident response

  • Vulnerability assessment

  • Risk management

• In-depth knowledge of:

  • CIS security principles

  • Networking

  • Vulnerabilities in modern operating systems and applications

Professional Experience

• At least 4 years of experience in:

  • Cybersecurity principles, technologies, and best practices

  • CIS security controls (traditional and cloud environments)

  • Designing, implementing, testing, and validating security components

  • Conducting security risk assessments and supporting accreditation processes

  • Identifying threats, vulnerabilities, and residual risks with mitigation recommendations

  • Supporting security accreditation in large-scale CIS projects

  • Using risk assessment methodologies and tools

Additional Skills

• Experience in:

  • Writing and enforcing security policies and procedures

  • Compliance audits (e.g., ISO 27001, NIST 800-53, GDPR)

  • Governance, Risk, and Compliance (GRC)

• Strong communication and technical writing skills

Level : Senior

Delivery mode: Onsite (Oeiras, Portugal)

Deadline 06/05/26