Senior Security Engineer

As a Senior Security Engineer, you will be a key hands-on contributor within OutSystems' Security Operations Center (SOC), responsible for implementing, tuning, and maintaining security controls across our multi-cloud infrastructure. This is a hands-on engineering position requiring strong expertise in cloud security, detection engineering, and security tooling to help defend our digital assets and global operations. You will work closely with, and under the technical direction of, the Lead Security Engineer and the wider security team.

Responsibilities

Build and operate security engineering across on-premise, multi-cloud (AWS, Azure, GCP or similar), and SaaS environments; Deploy, configure, and maintain security infrastructure (SIEM, EDR, logging, monitoring, alerting, threat-intelligence integrations) in support of a hybrid SOC model; Apply and help enforce security architecture and standards; Implement established security standards, policies, and best practices for cloud infrastructure, SaaS applications, and internal tooling; Engineer, implement, and tune detection and response; Develop and maintain detection rules and automated response playbooks for continuous threat detection; Support technical remediation efforts with engineering teams to implement fixes for vulnerabilities and misconfigurations; Partner with product engineering, DevOps, and QA to embed security best practices; Contribute to threat modeling, design/architecture reviews, and secure coding and deployment practices; Evaluate and adopt new security tools and techniques

Requirements

Solid hands-on experience (4-6 years) in security engineering/implementation for cloud-based and SaaS environments; Strong working knowledge of cloud security, including IAM, network segmentation, encryption, key management, secrets management, firewalls, and security tooling (SIEM, EDR, logging/monitoring); Hands-on scripting or automation skills (e.g. Python, PowerShell, Terraform, Yara) to implement security automations, detection rules, and guardrails; Practical experience implementing and tuning systems for incident response, detection engineering, and vulnerability management; Good understanding of the secure software development lifecycle (SDLC) and the ability to collaborate with dev/ops teams to embed security controls; Working knowledge of Windows, Linux, and orchestration platforms (Docker, Kubernetes, OpenShift, etc.); Strong problem-solving and analytical thinking, with the ability to identify threats and propose sound technical mitigations; Good communication skills to explain security issues, risks, and mitigations to both technical and non-technical stakeholders, and to work effectively within a team; Bachelor's degree in Computer Science, Information Security, Computer Engineering, or related field

Nice to have

Relevant security certifications (e.g. CISSP, CISM, or cloud-security credentials); Multi-cloud experience (AWS, Azure, GCP)

Benefits

Company at the vanguard of the agentic revolution; Real growth opportunities through structured programs, Professional Development Fund, and Internal Mobility Program; Collaboration with world-class talent and accessible mentors; Inclusive culture where talented individuals from all backgrounds are empowered to learn, experiment and make an impact