Cybersecurity Expert

• Solid experience in cybersecurity, technical security, security operations, or equivalent functions.

• Practical knowledge of vulnerability management, hardening, access control, privileges, secure configurations, exposed surfaces, and incident management.

• Experience with security tools such as SIEM, EDR/XDR, IAM, MFA, DLP, vulnerability scanners, or similar solutions.

• Ability to analyze security logs, events, and alerts, interpret risks, and propose containment, remediation, or improvement actions.

• Experience working in hybrid, cloud, on-premise, SaaS, and complex corporate environments.

• Knowledge of networks, operating systems, endpoints, identities, permissions, exposed services, and exposure surfaces.

• Ability to work with risk, prioritization, and remediation criteria.

• Good communication skills to coordinate with technical team profiles and other company areas with the aim of promoting good security practices and generating awareness in the organization.

• Valuable experience in security and compliance frameworks such as ISO 27001, NIST, CIS Controls, or similar, as well as in audits, control definition, and remediation plans.

• Ability to define processes, structure priorities, and evolve a cybersecurity function from an initial phase to a more scalable model.

• Join a company in full expansion, with a solid, ambitious, and constantly evolving project.

• Be part of a dynamic and collaborative environment, with real possibilities for professional development and growth within the organization.

• Participate in a project with a strong focus on innovation, excellence, and long-term value creation.

• Enjoy modern, sustainable facilities designed to promote well-being and collaboration.

• Access an attractive compensation policy, which includes a flexible compensation plan with options such as health insurance, restaurant card, transport card, and daycare.

• Have access to day-to-day support services, such as catering, fruit available every morning, and a canteen area.

• Have access to a gym in the offices, with 24/7 availability.

KAVE is a global brand in furniture and home decor design, dedicated to inspiring unique and unconventional people like us.

The furniture and decor industry is the third-largest retail industry worldwide. The potential is enormous and we aim high. We are a group of over 1,100 international, talented, and motivated professionals, with the mission to completely transform the experience from design to the customer, offering an excellent quality-price ratio and sustainable designs, as well as a top-tier omnichannel purchasing journey.

To keep up with our expansion, we need extraordinary people to help us achieve extraordinary challenges.

We are looking for a Cybersecurity Expert to take full responsibility for the cybersecurity of a company with over 1,100 professionals, leading both the strategy and the operational execution of protection initiatives, attack surface reduction, and the continuous improvement of security controls in corporate, hybrid, cloud, and digital environments.

The selected person will be the internal reference for cybersecurity and will have the challenge of consolidating current capabilities, defining the governance model, and progressively building and leading the necessary team to scale the security function within the organization.

• Design, implement, operate, and maintain technical and organizational cybersecurity controls.

• Identify, prioritize, and manage vulnerabilities in infrastructure, applications, and endpoints, cloud services, and exposed surfaces.

• Manage, analyze, and coordinate the response to security incidents, including internal forensic analysis or with the support of external providers, from detection and containment to remediation and subsequent learning.

• Review configurations, accesses, privileges, and exposed surfaces to detect weaknesses, deviations, and risk reduction opportunities.

• Lead the implementation, evolution, and effective use of protection solutions such as EDR/XDR, IAM, MFA, SIEM, DLP, vulnerability scanners, or equivalent tools.

• Analyze security events, alerts, and logs to detect threats or anomalous behaviors.

• Define and review hardening policies, segmentation, access control, privileges, and secure configuration in corporate, cloud, and hybrid environments.

• Support technical audits, security assessments, and remediation processes, ensuring the follow-up of corrective actions until closure.

• Drive automations, technical improvements, and processes that reduce operational risk, increase the efficiency of the security function, and facilitate the scalability of the area.

• Work transversally with internal teams, business areas, and providers to ensure the correct implementation of security measures and the remediation of identified risks.

• Participate in the definition of secure architecture and review technological changes with security impact, ensuring that technical decisions incorporate protection, compliance, and risk reduction criteria.

• Promote good security practices, technical awareness, and a cybersecurity culture throughout the organization.

• Define and evolve the cybersecurity governance model, including policies, standards, controls, monitoring processes, and reporting mechanisms.

• Design the evolution plan for the cybersecurity function and participate in the progressive construction of the team, identifying needs, key capabilities, and growth priorities.