Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 192 days ago

IT Systems & Security Engineer

DSwiss11 open roles

Where
Lisbon, Portugal
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Systems & Security EngineerDSwiss · Lisbon, Portugal

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on DSwiss's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 192 days ago

The posting

Job description

We are hiring an IT Systems & Security Engineer to strengthen the stability, security, and efficiency of our internal IT services. This role blends hands-on systems engineering with security operations. You will operate and improve endpoint security and device management, administer Microsoft 365, run vulnerability management, and enhance monitoring/SIEM workflows.

A core expectation of this position is continuous optimization of our IT and security operations: reducing manual work through automation, lowering operational cost where possible, and improving response times and service quality for employees.

You will work closely with the CISO and act as Deputy to the CISO during planned absences (e.g., holidays), ensuring operational continuity and effective decision-making.

  • Strong hands-on experience with Microsoft 365 administration, including Entra ID and Intune.
  • Practical experience operating Microsoft Defender (alert triage, investigations, policy tuning).
  • Proven endpoint management across macOS and Windows in a business environment.
  • Working knowledge of JAMF administration (profiles, policies, deployments, compliance reporting).
  • Working knowledge of vulnerability management with Nessus (or equivalent).
  • Familiarity with SIEM/logging concepts (ELK and/or other SIEM): ingestion, dashboards, alerting, operational improvement.
  • Solid network fundamentals relevant to IT security (DNS/DHCP/VPN, segmentation concepts, troubleshooting).
  • Strong documentation discipline (access management, operational procedures, incident notes).
  • Ability to operate effectively in ticketed environments and manage priorities (ITIL-inspired practices are a plus).
  • Demonstrable continuous-improvement mindset: simplify, automate, standardize, measure outcomes; bias for reducing manual effort, lowering cost, and improving response times.
  • Hands-on exposure to AI tools and workflows, with the ability to support secure, practical adoption in a business environment (e.g., testing and enabling use cases, understanding risks around data handling, and contributing to user guidance/guardrails).
  • Certifications (required or obtained within the first 6–12 months)CompTIA Security+ (or equivalent baseline security certification/competence). CompTIA Network+ (or equivalent demonstrated networking competence).
  • Nice to have (certifications)Microsoft certifications: SC-200 (Security Operations Analyst), SC-300 (Identity & Access Administrator), MD-102 (Endpoint Administrator), MS-102 (Microsoft 365 Administrator) or equivalents. Jamf certification: Jamf Certified Tech / Admin (or current Jamf certification track). ITIL Foundation (service management discipline). SIEM/security analytics training or vendor certifications (helpful, not required).
  • Nice to have (skills/experience)Automation/scripting (PowerShell, Bash, Python) applied to IT/security operations. Experience improving SIEM detection use cases and telemetry correlation. Experience in regulated environments (audit readiness, investigations, evidence handling). Experience translating security requirements into pragmatic employee guidance (policies, playbooks, enablement).

1) Endpoint Security Operations (Microsoft Defender)

  • Operate Defender day-to-day: monitor alerts, investigate incidents, tune policies, reduce noise, and improve detection quality.
  • Support security incident handling: triage, containment coordination, evidence collection, remediation follow-up, and lessons learned.
  • Improve endpoint security posture via policy hardening, baselining, and measurable reduction of repeated issues.

2) Microsoft 365 Administration (Entra ID, Intune, Exchange, Teams, SharePoint/OneDrive)

  • Administer Microsoft 365 services with a focus on security, reliability, and operational hygiene.
  • Maintain access governance: joiner/mover/leaver lifecycle, role assignments, privileged access patterns, and conditional access support (where applicable).
  • Improve identity and device-based controls in partnership with the CISO (e.g., MFA coverage, device compliance gates, administrative separation).

3) Device Management & Compliance (Apple & Windows)

  • Manage endpoint lifecycle and compliance across Apple and Windows fleets.
  • Administer JAMF for macOS (profiles, deployments, compliance reporting, hardening).
  • Manage Windows endpoints primarily through Intune (configuration, application deployment, compliance, configuration baselines).
  • Standardize and streamline onboarding/offboarding and device replacement processes.

4) Vulnerability Management (Nessus)

  • Run and improve vulnerability scanning coverage, schedules, and reporting.
  • Prioritize remediation by risk and business impact; track closure with clear ownership and deadlines.
  • Establish durable reporting cadence and measurable remediation performance.

5) SIEM / Logging / Monitoring (ELK / SIEM)

  • Improve SIEM effectiveness: ingestion health, source coverage, dashboards, alerting, and correlation across endpoint and infrastructure telemetry.
  • Help operationalize detection use cases (high-signal alerts, playbooks, reporting that supports decision-making).
  • Produce concise operational reporting for stakeholders (security posture, trends, improvements, key risks).

6) Internal Tooling & Service Delivery (Atlassian, GitLab)

  • Operate and improve Jira Service Management/Confluence workflows: queues, SLAs, request types, automation rules, and documentation standards.
  • Support GitLab access and enablement from an IT/security operations perspective (e.g., identity, access controls, user lifecycle), as applicable.
  • Ensure IT services are reliable, measurable, and continuously improving.

7) Secure Enablement of AI in the Company

  • Enable and support secure use of AI tools and workflows across the company in collaboration with the CISO and key stakeholders.
  • Help define and implement practical guardrails (approved tools, data handling rules, access controls, logging/monitoring considerations, user guidance).
  • Support employees with secure adoption: documentation, onboarding guidance, and pragmatic reviews of new AI use cases.

8) Automation, Optimization, and Cost Discipline (Mandate Across the Role)

  • Identify and implement automation opportunities (e.g., identity/device lifecycle, ticket workflows, alert triage, reporting).
  • Reduce operational friction and manual work while improving service speed and quality.
  • Maintain cost awareness: rationalize tooling/configurations where appropriate, reduce waste, and improve vendor/service ownership clarity.

9) Vendors, Procurement Support, and Operational Continuity

  • Coordinate with suppliers for hardware/services: delivery tracking, escalation paths, renewal visibility, and operational performance issues.
  • Maintain runbooks and operational procedures to ensure resilience and audit readiness.
  • Act as Deputy to the CISO during absences: maintain day-to-day security operations, coordinate incident response activities, and escalate appropriately.
  • Provide operational leadership as needed to keep internal IT and security services stable and responsive.

How we evaluate success (first 3–6 months)

  • Defender operations: triage workflow is consistent; alert noise is reduced; repeated endpoint issues decrease; incident handling is timely and well-documented.
  • M365 / Intune / JAMF: device compliance is reliable; onboarding/offboarding is smooth and measurable; admin and access hygiene is improved.
  • Vulnerability management: scanning coverage is consistent; remediation tracking is risk-driven; clear ownership and closure cadence is established.
  • SIEM / visibility: ingestion stability improves; dashboards and alerts become more actionable; stakeholders get concise, useful reporting.
  • Optimization: multiple tangible automation/standardization improvements delivered that reduce manual work, reduce cycle times for employee requests, and/or reduce operational costs.
  • Deputy coverage: operational continuity is demonstrably strong during CISO absence, with appropriate escalation and decision-making.

Job benefits

  • Competitive Salary.
  • Hybrid Work Model: Enjoy the flexibility of remote work while staying connected with at least 40% of your time spent in our vibrant Lisbon office.
  • 25 Days of Vacation: Recharge and thrive with above-market holiday time, reflecting our people-first approach to work-life balance.
  • Bi-Annual International Retreats: Collaborate, relax, and explore at company offsites in beautiful locations like Switzerland, Italy, and beyond.
  • Empowered to Make an Impact: Every voice matters—you're encouraged to drive improvements, contribute ideas, and create real value from day one.
  • Learn from the Best: Grow your skills in a high-performing, international team of experienced and talented professionals.
  • Delicious Perks: Enjoy free lunches, snacks, and drinks daily—because fuel matters.
  • Meal allowance, health insurance coverage, and public transportation allowance.
  • Work for a company committed to sustainability—our data centers operate climate-neutral.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against DSwiss's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on DSwiss's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    DSwiss's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.