Cybersecurity Operations Lead

Job Description

As an Independent Power Producer, Voltalia operates in over 20 countries, developing, building, and maintaining renewable energy projects and services across five key technologies: solar, wind, hydro, biomass, and storage. Backed by the AFM Group, a globally recognized, family-owned investment group, we benefit from long-term stability and a shared commitment to sustainable growth.

By the end of 2024, our operational and under-construction capacity reached 3.3 gigawatts-a 14% increase since 2023. With 1,500 employees worldwide, we thrive in a fast-moving environment driven by adaptability, innovation, and collaboration.

In our company, your work directly contributes to a more sustainable world. Whether you're driving projects forward, optimizing operations, or leading strategic initiatives, you're contributing to our mission to improve the global environment and foster local development.

At Voltalia, we welcome individuals from all backgrounds, whatever your race, ethnicity, gender, nationality, age, disability, sexual orientation, and experience. In our company, diversity drives innovation and contributes to a workplace where everyone can thrive.

Ready to make an impact? Bring your energy-let's power a sustainable future together!

Your Missions

Lead and manage Cybersecurity Operations, covering SOC, security engineering, vulnerability and exposure management, identity security, and incident response. Ensure operational excellence through KPIs, SLAs, automation, and continuous improvement. Your responsibilities will be:

• Organize and direct security operations; leverage internal and external resources.
• Define service catalog, KPIs, SLAs; monitor and improve delivery.
• Create and refine operational processes and procedures.
• Act as Tier 3 focal point for major incidents.
• Manage MSSP/MDR performance and compliance.
• Drive automation, detection engineering, and operational maturity.
• Identity Security: Conditional Access, MFA posture, PIM/PAM, identity threat detection (Entra ID, MDI).
• Exposure Management: Beyond scanning - ASM, BOM/SBOM, threat-informed prioritization (EPSS, KEV).
• Detection Engineering: Full use case lifecycle and threat hunting cadence.
• Automation & Orchestration: SOAR playbooks, auto-containment, MIM runbooks.
• Cloud & OT/ICS Security: Interfaces for Defender for Cloud, CSPM/CWPP, OT monitoring.
• Data Security Ops: Integration with DLP, Insider Risk, classification signals.
• Business Continuity Links: DR/BCP integration for cyber scenarios; tabletop exercises.

Qualifications & Experiences

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 7+ years in Cybersecurity Operations, including SOC and engineering services.
• 3+ years in a leadership role managing internal teams and external providers.
• Expertise in SOC, security engineering, identity security, vulnerability/exposure management, and incident handling.
• Strong leadership, negotiation, and vendor management skills.
• Ability to design service frameworks, define KPIs/SLAs, and measure performance.
• Fluent both in Portuguese & English.
• Travel availability, mainly in Europe.

Key Skills

• Ability to work independently and make critical decisions under pressure.
• High accountability for service quality and incident outcomes.
• Strong attention to detail in processes, reporting, and compliance.
• Excellent communication and collaboration across technical and business teams.
• Analytical mindset for complex security challenges.
• Comfortable in dynamic environments and evolving threat landscapes.

If this opportunity excites you, we'd love to hear from you! Apply now!

If you don't see the perfect opportunity today, don't worry - upload your resume and subscribe to job alerts, and we'll contact you when a match arises.