Information Security Analyst (CrowdStrike/Palo Alto XDR) - Full Remote Portugal

ABOUT THE OPPORTUNITY

We are looking for a mid-level Information Security Analyst to join an international technology consultancy delivering innovative digital solutions for global clients. You will become part of a collaborative Security team responsible for protecting enterprise infrastructure, improving security operations, and supporting compliance with internationally recognized security standards such as ISO 27001 and UK Cyber Essentials Plus.

This is a Full Remote opportunity based in Portugal, with daily collaboration across European time zones. The role is ideal for professionals who enjoy working in Security Operations, Incident Response, Vulnerability Management, and Security Automation while continuously improving an organization's security posture.

PROJECT & CONTEXT

As an Information Security Analyst, you will monitor enterprise infrastructure, investigate security events, manage vulnerabilities, and support incident response activities. You will develop and fine-tune detection rules for XDR platforms, analyse security alerts, coordinate remediation efforts, and collaborate with engineering teams to integrate Threat Modeling into the Software Development Lifecycle (SDLC).

You will also contribute to security guidelines, automate operational processes through scripting, and build integrations between security platforms using Infrastructure as Code (IaC) principles and APIs. The environment includes cloud and on-premises infrastructure running across AWS, Google Cloud Platform (GCP), Linux, macOS, and Windows systems.

WHAT WE'RE LOOKING FOR (Required)

• Minimum 3 years of hands-on experience in Information Security, Security Operations, Incident Response, Vulnerability Management, or related security domains.
• Practical experience with XDR platforms such as CrowdStrike Falcon and/or Palo Alto Cortex XDR.
• Experience investigating security events and creating, tuning, and maintaining detection rules.
• Hands-on experience with vulnerability management solutions such as Tenable.io / Tenable.sc or Qualys VMDR, including vulnerability scanning, reporting, and remediation coordination.
• Strong scripting skills using Python 3.x and/or Bash to automate operational and security tasks.
• Solid knowledge of Linux, macOS, and working knowledge of Microsoft Windows administration.
• Good understanding of networking fundamentals and cloud environments, particularly AWS and Google Cloud Platform (GCP).
• Familiarity with Infrastructure as Code (IaC) concepts.
• Working knowledge of security frameworks including MITRE ATT&CK, NIST Cybersecurity Framework (CSF), and CIS Controls.
• Experience with change management processes, including testing, validation, rollout, and rollback procedures.
• Strong communication and stakeholder management skills.
• Fluent English (spoken and written) is mandatory.

NICE TO HAVE (Preferred)

• Experience using APIs to automate security workflows and vulnerability management processes.
• Exposure to Security Engineering and security tool integrations.
• Experience supporting Threat Modeling initiatives within the Software Development Lifecycle (SDLC).
• Knowledge of enterprise security compliance standards such as ISO 27001 and UK Cyber Essentials Plus.
• Previous experience working in distributed international teams across multiple time zones.
• Proactive mindset with a strong focus on continuous improvement, collaboration, and security best practices.

Compensation: €2,300 – €2,900/month net, depending on experience and seniority level.

Why HumanIT people stay (4.4 Glassdoor, 89% recommend)

- 15th month salary
- Health insurance covering your family
- Birthday off
- Mobility program for digital nomads
- Real work-life balance

Full benefits https://www.humanit.pt/careers/#perks
What it's really like https://www.humanit.pt/careers/#work-at