Lead Security Engineer

As a Lead Security Engineer at OutSystems, you will be a critical technical leader in OutSystems’ Security Operations Center (SOC), responsible for designing, implementing, and managing security across our multi‑cloud infrastructure. You will lead security engineering efforts, architect hybrid SOC models, and ensure that our digital assets and global operations are protected.

Key Responsibilities

• Lead and manage security engineering across on‑premise, multi‑cloud (AWS, Azure, GCP or similar), and SaaS environments; design, architect, deploy, and implement the security infrastructure (SIEM, EDR, logging, monitoring, alerting, threat‑intelligence integrations) to support a hybrid SOC model.
• Design and enforce security architecture and strategy; define and implement security standards, policies, and best practices for cloud infrastructure, SaaS applications, and internal tooling.
• Engineer, implement, and continuously tune security systems (SIEM, EDR, etc.) for continuous threat detection and automated response; lead technical remediation efforts, working with engineering teams to fix vulnerabilities and misconfigurations found during incident response or audits.
• Work closely with product engineering, DevOps, QA to embed security best practices; perform threat modeling, review design/architecture, and implement secure coding and deployment practices, including detection engineering for applications.
• Continuously evaluate, select, and implement new security tools and frameworks to ensure that our defenses scale with our business and technology growth.

Qualifications

• 5–7 years of hands‑on experience in security engineering/implementation for cloud‑based and SaaS environments, ideally multi‑cloud (AWS, Azure, GCP).
• Deep knowledge of cloud security, including IAM, network segmentation, encryption, key management, secrets management, firewalls, and security‑tooling architecture (SIEM, EDR, logging/monitoring).
• Hands‑on scripting or automation skills (e.g., Python, PowerShell, Terraform, Yara) to implement security automations, detection rules, and guardrails.
• Solid experience with designing, implementing, and tuning systems for incident response, detection engineering, and vulnerability management.
• Strong understanding of secure software development lifecycle (SDLC) and ability to work closely with dev/ops teams to engineer and embed security controls.
• Knowledge of Windows, Linux, and orchestration platforms (Docker, Kubernetes, OpenShift, etc.).
• Excellent problem‑solving, analytical thinking, and the ability to anticipate threats, model attacks, and propose robust technical mitigations.
• Strong communication skills to explain security issues, risks, and technical mitigations to technical and non‑technical stakeholders, and to lead a team.
• Bachelor’s degree in Computer Science, Information Security, Computer Engineering, or related field.
• Relevant security certifications are a plus (e.g., CISSP, CISM, or other cloud‑security credentials).

What we have to offer you

• A company that is always growing, changing, and innovating; we challenge each other to innovate in our products, team, and technology usage.
• Real career opportunities: vertical progression, lateral moves, and specialized skill mastery.
• Collaborative culture: work with colleagues who are smart, hard‑working, and driven; we act as one global team.
• Disrupting the status quo is in our DNA. We ask “why” a lot to connect individual work to the bigger picture and uncover better ways.

OutSystems nurtures an inclusive culture of diversity, where everyone feels empowered to be their authentic self and perform at their best. A company that embraces the creativity and innovation that comes through diverse perspectives. We are committed to creating a team that reflects society through inclusive programs and initiatives and are proud to be an equal‑opportunity employer. All qualified applicants receive equal consideration regardless of race, place of origin, color, age, marital status, religion, sex, sexual orientation, gender expression or identity, protected veteran status, disability status or any other status protected by law.