Cloud Security Engineer (f/m/div.)

Company Description

The Bosch group has more than 400 000 employees around the world, present in 60 countries, and we are proud to impact people's lives and to work towards a more sustainable future.

Since its inception, Robert Bosch, SA, based in Lisbon, has proudly served as the cornerstone of the Bosch Group's presence in Portugal. We excel in providing essential central services such as Accounting, Procurement, Communications, Legal and Marketing, firmly establishing our reputation as a leader in critical domains like Information Technology and Industrial Consultancy. Moreover, our strong dedication to our most invaluable asset, our people, lies at the very core of our mission.

At Bosch, we shape the future by inventing high-quality technologies and services that spark enthusiasm and enrich people's lives. Our promise to our associates is rock-solid: we grow together, we enjoy our work, and we inspire each other. Join in and feel the difference in mindsets, cultures, generations, identities and perspectives. Everyone should bring their authenticity and work together respectfully. Bosch is an employer that values diversity and equal opportunities. We welcome applications from people with disabilities and we can provide reasonable accommodations during the recruitment process and in the performance of professional activity. By including everyone and ensuring equal opportunities we unleash our full potential.

Job Description

As a Cloud Security Engineer, you will be responsible for designing, implementing, and maintaining secure cloud environments, with a strong focus on Microsoft Azure. You will play a key role in protecting cloud infrastructure, ensuring compliance, and embedding security into development and operations processes.

Key Responsibilities

• Design and implement secure cloud architectures, primarily on Microsoft Azure
• Develop, deploy, and manage security controls, policies, and procedures
• Monitor cloud environments to detect and respond to threats, vulnerabilities, and incidents
• Perform risk assessments and vulnerability scans, ensuring timely remediation
• Ensure compliance with industry standards and security frameworks
• Implement and manage Identity and Access Management (IAM), including RBAC models
• Secure cloud networking components (e.g., VNets, firewalls, private endpoints)
• Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps)
• Respond to security incidents and conduct root cause analysis
• Maintain clear and up-to-date documentation of security architecture and processes

Qualifications

Education

• Degree in Computer Science, Information Security, or a related field (or equivalent experience)

Experience

• Minimum of 5 years of experience in IT Security, with a strong focus on Cloud Security
• Hands-on experience with Microsoft Azure security services (e.g., Defender for Cloud, Key Vault)

Know-how

• Strong understanding of cloud architecture and security best practices
• Experience with identity management solutions (Azure AD, MFA, Conditional Access)
• Solid knowledge of network security concepts (firewalls, VPNs, Zero Trust)
• Familiarity with scripting/automation (PowerShell, Python, or similar)
• Experience with security monitoring tools and SIEM solutions
• Good understanding of compliance and regulatory requirements

Languages

• Fluent in English (written and spoken)

Ways of Working & Personality

• Analytical mindset with strong problem-solving skills
• Proactive and detail-oriented approach
• Strong collaboration and communication skills
• Ability to work in cross-functional and international teams

Nice to Have

• Experience with other cloud providers (AWS and/or Google Cloud Platform)
• Knowledge of container security (Docker, Kubernetes)
• Experience with Infrastructure as Code (Terraform, ARM, Bicep)
• Exposure to endpoint security and threat intelligence tools
• Relevant certifications (e.g., AZ-500 – Azure Security Engineer Associate)