Cybersecurity Specialist

Description

Job Summary: We are seeking a Cybersecurity Specialist to lead the Cybersecurity team, developing and operating digital services for the national education ecosystem. Key Highlights: 1. Lead and manage the Cybersecurity team in the Operations area 2. Shape the future of education through technology 3. Foster an inclusive and innovative work environment The **FCCN – Digital Services for Education**, a unit of the **AGSE – Agency for the Management of the Educational System**, is looking for a **Cybersecurity Specialist** to manage the **Cybersecurity** team in the **Operations** area. With the mission of developing and operating digital services that support the national education ecosystem, FCCN – Services for Education aims to build a modern, efficient, and technologically advanced infrastructure capable of meeting the real needs of schools and their professionals. At FCCN Education, we believe gender equality is fundamental to creating an inclusive and innovative work environment. We commit to promoting equal opportunities for all individuals, regardless of gender, identity, or expression, ensuring every application is evaluated fairly and transparently. If you seek to join a large-scale project with impact on the future of education through technology, this opportunity is for you. Join us and contribute to transforming the Portuguese education system. Responsibilities: * Define the vision, maturity roadmap, and operational model for cybersecurity detection and incident response capabilities (SOC/CSIRT), aligned with organizational risk and objectives; * Lead security monitoring operations, ensuring severity criteria, effective escalation, and coordinated response to critical incidents; * Govern security platforms such as SIEM, SOAR, XDR, and EDR, ensuring telemetry quality, use-case prioritization, and playbook automation; * Integrate Threat Intelligence sources and guide threat hunting activities based on TTPs (MITRE ATT\&CK), promoting purple team exercises; * Manage the vulnerability management lifecycle—from identification and prioritization through remediation—in coordination with technical teams; * Ensure evidence for audits and compliance with legal and regulatory obligations, including GDPR and NIS2 where applicable; * Maintain, test, and evolve incident response and business continuity/recovery plans, incorporating lessons learned and security improvements; * Report regularly to senior management and coordinate with departments such as Legal, DPO, and Communications during incidents or crises; * Manage contracts, SLAs, and performance of cybersecurity service providers; * Size and develop SOC and CSIRT teams, promoting continuous training, certifications, and a culture of continual improvement; * Define and monitor security KPIs (MTTD, MTTR, dwell time, false positive rate, control coverage), producing executive reporting; * Participate in the cybersecurity committee, ensuring integration of security requirements from early project stages. **Requirements** * Bachelor’s degree in Computer Engineering or equivalent field; * Proven experience leading SOC and/or CSIRT teams; * Solid knowledge of incident management, digital forensics, and incident response (DFIR); * Experience with SIEM, SOAR, XDR, and EDR platforms; * Knowledge of threat intelligence, threat hunting, and frameworks such as MITRE ATT\&CK; * Experience in vulnerability management, identity management, and Zero Trust models; * Knowledge of security in cloud, email, and perimeter environments; * Ability to produce executive reporting and communicate effectively with multiple stakeholders. Behavioral Competencies: * Leadership in crisis contexts and decision-making under pressure; * Clear, structured, and effective communication; * Critical thinking and strong problem-solving ability; * Resilience, stress management, and sense of responsibility; * Risk orientation, professional ethics, and confidentiality; * Planning, organization, and execution capability. Additional Valued Competencies and Knowledge: * CISSP (ISC²) or CISM (ISACA); * CompTIA CySA\+ and/or Security\+; * ITIL 4 Foundation; * ISO/IEC 27701 or equivalent training in privacy and data protection. **Benefits** * Join a young and dynamic team in a relaxed environment where we value closeness and teamwork; * Hybrid work arrangement; * Continuous training aimed at your professional development; * Access to a campus with free parking, welcoming and well-located in Lisbon; * Various internal initiatives to foster interaction and camaraderie among employees; * Option to enroll in ADSE (Portuguese Health Service); * On-site cafeteria; * Objective-based performance management.