Cybersecurity Specialist at Aceve in Lisbon

At Aceve, we back the builders of society. Founded in the Nordics and growing across Europe, we build digital tools for the people who construct and maintain our physical world - giving electricians, plumbers, and contractors back their time, clarity, and confidence. With over 900 employees across 8 countries, leading brands in 7 customer markets, and more than €100M in revenue, we're on an ambitious growth journey, and we're just getting started. We're an AI-first company, and we work with grit, openness, and a good dose of joy.

About the role:
Aceve runs IT and business systems for around a thousand people, and more than forty products for over 23,000 customers across eight countries. We keep growing through acquisition, and every new entity arrives with its own monitoring, scanning gaps and backlog. Someone needs to see all of it, decide what matters first, and make sure the teams who own the systems fix it. That’s you. You’ll be one of three Cybersecurity Specialists reporting to the CISO, each owning a domain and covering for the others. Yours is vulnerability management and attack surface: you set the direction, targets and tooling, and you answer for how well we find and close risk across the group.

What will you do:
You own how we find, prioritise and close vulnerabilities and exposure across corporate IT, business systems and the product platform. Most fixes land with people who don’t report to you, so judgement and influence matter as much as tooling.

• Triage findings, set severity and SLA, assign an owner, and follow up to closure with technical guidance

• Run the findings hub as our system of record: deduplication, severity normalisation, the SLA model and owner routing

• Manage the scanner portfolio and its coverage against the enterprise architecture system of record, and scan our external attack surface and cloud posture across every entity

• Retest remediated findings so closure is verified, and report SLA performance monthly per owner, including vulnerability data for Board and investor reporting

• Keep detection in SIEM and EDR/XDR effective, follow up alerts and escalations, and act as Incident Owner or primary investigator when assigned, with the three specialists sharing the load

• Set logging and monitoring requirements for new systems and acquisitions during integration, and keep cyber hygiene visible and improving in every entity

• Pull together detection, response and vulnerability evidence for ISO 27001, NIS2 and ISAE 3402, and give technical input to architecture reviews, supplier assessments and customer security questions

We believe you have:

• Hands-on experience in security operations, vulnerability management or detection engineering, typically 4 or more years

• A degree in a relevant field, or equivalent practical experience

• Hands-on time with EDR/XDR, SIEM and vulnerability scanning across a mixed estate, including scanner tuning and SLA reporting

• A track record of getting fixes made by teams you don’t manage, by explaining the risk clearly and following up steadily

• Sound judgement about what actually reduces risk, so the most important work gets done first

• A steady, methodical approach to investigating incidents, and the willingness to bring bad news early

Not ticking every box? No worries! We value potential and drive, so apply anyway or connect with us- you might be just what we're looking for in our growing organisation! Join Aceve and take your expertise to the next level, together we are redefining what’s possible in craft and construction solutions!

Aceve is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Our selection process is conducted continuously and without discrimination, ensuring an equal opportunity for all candidates.