04/06/2026 updated
100 % available
Senior Cybersecurity Consultant & Incident Response Lead
Algueirão-Mem Martins, Portugal
Only remote
Bachelor’s Degree in Information Systems & Computer EngineeringAbout me
Cybersecurity consultant with 6+ years of experience, including 3 years handling 2,000+ incidents at national scale at CERT.PT, Portugal's National CSIRT. Now running Poodle IT, delivering GRC consulting, compliance and advisory, as well as incident response planning for companies across Europe.
Data GovernanceIncident ResponseDigital Compliance
Cybersecurity Incident Response
National-scale incident response handling with over 2,000 security incidents managed and triaged across Portuguese cyberspace including phishing campaigns, ransomware attacks, and data breaches
ISO 27001 & GRC Consulting
Gap analysis and risk assessment expertise for mid-size technology resellers identifying compliance gaps and security liabilities as groundwork for ISMS certification
Digital Forensics & Malware Analysis
Memory analysis, disk forensics and network traffic analysis supporting incident investigations with specialized tools like Volatility, Wireshark, and tcpdump
GDPR Compliance Assessment
Data processing activities evaluation, consent mechanisms analysis and data protection practices assessment for regulatory alignment
Vulnerability Scanning & Security Assessment
Automated vulnerability scanning across client infrastructure using tools like Nmap and Burp Suite with prioritized remediation guidance
Security Awareness Training
Design and delivery of cybersecurity workshops, webinars and training sessions for public sector organizations covering threat landscape and GDPR obligations
Experience
Professional experience5 - 10 years
Freelancer since2026
Languages
EnglishFluentFrenchBasic knowledgePortugueseNative speakerSpanishBasic knowledge
Project history
Founded and led a cybersecurity consultancy serving technology companies and SMEs across Portugal and Europe.
- Delivered GRC consulting engagements including ISO 27001 gap analysis, risk assessments, and compliance roadmaps aligned with NIS2, DORA, and GDPR requirements
- Performed vulnerability assessments across infrastructure and web applications, delivering prioritised remediation guidance
- Designed and delivered security awareness training programmes for public administration and technology sector clients
- Managed full client lifecycle from scoping and proposal development through delivery and ongoing advisory
- Served clients across public administration and technology sectors
Senior Cybersecurity Analyst at CERT.PT, Portugal's National CSIRT, performing incident response operations at national scale.
- Represented Portugal in the EU CSIRTs Network, collaborating on cross-border incident response, threat intelligence sharing, and coordinated disclosure
- Handled approximately 50 incidents per week across the full Portuguese cyberspace, covering citizens, SMEs, large enterprises, and government entities, including phishing campaigns, account compromises, ransomware, website defacements, and data leaks
- Performed digital forensics operations in support of incident investigations and law enforcement collaboration
- Provided technical guidance and remediation support directly to affected organisations during active incident response engagements
- Developed internal tooling and automation workflows supporting incident detection, triage, classification, and response processes