IT Security Engineer

Build. Test. Deliver. Enjoy at Pepco!

About the role

At Pepco, we’re growing fast and building our Tech Hub in Porto to support our business across Europe.

We are looking for an IT Security Engineer to join the team. In this role, you will be responsible for designing, implementing, and maintaining state-of-the-art IT security solutions to protect the distributed IT infrastructure and retail systems across 18 European countries. The role focuses on developing the security architecture, deploying advanced protection mechanisms, and ensuring strong resilience of IT environments against incidents and cyber threats.

If you like things simple, practical and with real ownership, you’ll fit right in.

What you’ll be doing

• Design and implementation of modern security solutions (SIEM, SOAR, EDR/XDR, WAF, Zero Trust, PAM, IAM).
• Build and maintain security architecture for retail stores, e-commerce platforms, mobile applications, and cloud environments (Azure, AWS, GCP).
• Integration and automation of processes within Security Operations (SOC, Incident Response, Threat Intelligence).
• Collaboration with IT and business teams in the rollout of new technologies, ensuring security and compliance by design.
• Verification and penetration testing of new systems, applications, and infrastructure - in cooperation with external vendors.
• Ensure compliance with regulatory and industry standards (ISO 27001, PCI DSS, GDPR, NIS2).
• Monitor security trends and threat landscape - recommend and implement innovative tools and defense solutions.
• Ensure measurable business impact from deployed models, such as revenue growth, margin optimisation, cost reduction or improved customer engagement.
• Contribute to the development and prioritisation of the organisation’s advanced analytics and AI roadmap.

What we’re looking for

• University degree in computer science, telecommunications, IT security or equivalent experience.
• Proven track record in designing and implementing security solutions for retail / e-commerce systems and cloud & hybrid infrastructures.
• Relevant certifications are highly desirable: CISSP, CCSP, OSCP, CISM, Azure/AWS Security Specialty, CEH.
• 5 years of professional experience in IT security engineering within large, distributed environments.
• Hands-on experience with technologies such as SIEM, EDR/XDR, SOAR, IDS/IPS, DLP, MDM, CASB, IAM/PAM.
• Understanding of secure coding practices and working with DevOps teams (DevSecOps).
• Ability to translate business requirements into technical security solutions.
• Strong expertise in cyber threat intelligence and risk analysis.
• Capability to work in a multinational environment and drive cross-country security initiatives.
• Strong problem-solving mindset and hands-on approach
• Ability to work in an international and fast-paced environment.
• Fluent English (mandatory) – you will work daily with international stakeholders
• Clear communication and team collaboration

What we offer

• Hybrid model: 2 days remote / 3 days onsite
• Office based in Porto: 📍 https://maps.app.goo.gl/Nn7hc6uYrmPiT8Fc9
• Competitive salary and annual bonus
• Health insurance from the month after joining
• Meal allowance
• Employee discount in Pepco stores in Portugal
• Learning and development opportunities
• International exposure and collaboration across markets
• A simple, down-to-earth culture where people support each other

About Pepco

Pepco is one of Europe’s fastest-growing retail companies, with thousands of stores and millions of customers visiting us every month. Behind that growth, there’s a team of people who make things happen. We keep things simple, we focus on results, and we support each other to get there. At Pepco, no two days are the same. And that’s exactly how we like it.

Interested? Apply now and be part of building something new in Porto!