## Why work with us At Sysmatch, we invest in people as a way to achieve our clients' goals, which also become our goals when they trust their technological future to our teams. Our investment in technological specialisation has over 20 years of existence on the national and international scene, with information technology solutions developed for each client, for each industry. We live in different times and it is unquestionable how indispensable technology has become in our daily lives. We are looking for experts to join our teams in each of the technology fields, who want to make a difference and build a solid career in IT.### CONTINUOUS TRAININGWe believe that life is a continuous learning process, and entering the job market is just the beginning. Whether you want to improve your soft or hard skills, you can count on our support to develop your skills.### HEALTH INSURANCEAt the end of the day, we know that one of the most important things is the health and safety of everyone involved. That is why you can benefit from health insurance and countless advantages from a wide network of health care partners.### PARTNERSHIPSSysmatchers have at their disposal a wide variety of companies that offer discounts and rewards in the most diverse areas. From gyms to banks, culture and entertainment, health and wellness, you can take advantage of all the benefits.### ROOM FOR GROWTHWe want to live up to your dreams. With us, you will have space to develop all your skills and reach further in your digital journey.### ROOM FOR GROWTHWe want to live up to your dreams. With us, you will have space to develop all your skills and reach further in your digital journey.### CONTINUOUS TRAININGWe believe that life is a continuous learning process, and entering the job market is just the beginning. Whether you want to improve your soft or hard skills, you can count on our support to develop your skills.### HEALTH INSURANCEAt the end of the day, we know that one of the most important things is the health and safety of everyone involved. That is why you can benefit from health insurance and countless advantages from a wide network of health care partners.### PARTNERSHIPSSysmatchers have at their disposal a wide variety of companies that offer discounts and rewards in the most diverse areas. From gyms to banks, culture and entertainment, health and wellness, you can take advantage of all the benefits.### ROOM FOR GROWTHWe want to live up to your dreams. With us, you will have space to develop all your skills and reach further in your digital journey.### CONTINUOUS TRAININGWe believe that life is a continuous learning process, and entering the job market is just the beginning. Whether you want to improve your soft or hard skills, you can count on our support to develop your skills.### HEALTH INSURANCEAt the end of the day, we know that one of the most important things is the health and safety of everyone involved. That is why you can benefit from health insurance and countless advantages from a wide network of health care partners.### PARTNERSHIPSSysmatchers have at their disposal a wide variety of companies that offer discounts and rewards in the most diverse areas. From gyms to banks, culture and entertainment, health and wellness, you can take advantage of all the benefits.### ROOM FOR GROWTHWe want to live up to your dreams. With us, you will have space to develop all your skills and reach further in your digital journey.### OT Consultant - Lisbon Sysmatch is an IT Consultancy and Outsourcing Company with a wide range of technological skills, resulting from the accumulation of know-how and the experience of our consultants, allowing the implementation of solutions adapted to the needs of our clients, privileging their robustness and scalability. More than two decades in the IT market, we present ourselves as a flexible, adaptable, innovative and forward-looking Company. At the moment we are looking for the following candidate: OT Consultant Tasks and Responsibilities:• Design and implement the operational PSIRT vulnerability lifecycle: intake, triage, risk assessment, remediation tracking, disclosure, and closure.• Lead vulnerability triage and risk assessment activities: exploitability analysis, product/system exposure, operational impact evaluation, and mapping CVE/CVSS data to engineering remediation priorities.• Define and operationalize severity assessment frameworks that combine CVSS scoring with contextual impact modifiers (safety, reliability, regulatory exposure, operational risk).• Create practical triage workflows, prioritization criteria, escalation models, and decision frameworks that balance remediation urgency with business and engineering constraints.• Advise on tooling and workflow architecture (Service Now VM or equivalent, vulnerability management platforms, SIEM/SOAR integration), including ticket/state life-cycles, metadata schemas, and handover points to engineering.• Define required metadata and taxonomy: product lineage, firmware versions, asset hierarchies, ownership, exploitability flags, event/incident taxonomies.• Develop PSIRT process artifacts: SOPs, triage playbooks, classification criteria, RACI models, escalation trees, remediation SLAs, disclosure workflows, and regulatory notification procedures.• Coordinate integration points with SOC, SIEM/SOAR pipelines, Dev Ops, R&D engineering, product security, and operations; design alert triggers and remediation handoff processes.• Support tooling configuration and rollout: data model requirements, required fields, escalation triggers, dashboards, metrics, and audit evidence requirements.• Translate strategic PSIRT frameworks into executable operational practices and backlog-integration models (SLAs, remediation prioritization, engineering backlog handover).• Provide training, onboarding, and knowledge transfer to internal teams or local delivery leads; act as subject-matter authority for PSIRT operational questions.• Monitor and continuously improve PSIRT KPIs, dashboards, and post-incident/lessons-learn processes. Hard Skills:• Deep domain expertise in PSIRT, product security, or pre-CERT operations, preferably with exposure to industrial products, embedded/OT/Io T, safety-critical systems, or complex software products.• Strong practical experience in vulnerability triage, CVE analysis, exploitability assessment, and prioritized remediation planning.• Proficiency applying CVSS and building severity models that incorporate contextual modifiers (safety, regulatory, operational impact).• Tooling experience: Service Now Vulnerability Management (preferred) or Kenna, Tenable, Qualys, Jira-based workflows, or equivalent vulnerability management platforms.• Ability to design data models and metadata taxonomies for vulnerabilities, assets, firmware/product lineage, and ownership.• Familiarity with SOC/SIEM/SOAR interactions and designing alert-to-PSIRT pipelines.• Experience translating security processes into engineering backlog models, SLAs, and remediation tracking mechanisms.• Competence in creating operational documentation: SOPs, playbooks, RACI matrices, escalation flows, and disclosure/regulatory workflows.• Capability to define metrics, dashboards, and audit evidence requirements for governance and compliance. Soft Skills:• Strong stakeholder management and influence across security, engineering, operations, and product teams.• Excellent analytical skills and attention to operational detail.• Ability to translate strategic direction into pragmatic, repeatable operational practices.• Clear communicator and effective technical writer for playbooks, SOPs, and tooling requirements.• Consulting mindset: adaptable to distributed leadership and collaborative delivery models.• Coaching and mentoring capability to upskill delivery teams and engineers.• Fluent English; additional local language fluency is beneficial where applicable. What#J-18808-Ljbffr