Security Engineer

Responsibilities

• Manage and configure the current security stack, including SIEM, PAM, EDR, and identity management systems.
• Experience managing Microsoft Intune security, including device management, security baselines, endpoint compliance, and endpoint protection.
• Design, implement, and maintain new and existing security solutions to protect company systems and networks.
• Collaborate with teams across the company to integrate security into system architectures.
• Conduct security assessments of new technologies and recommend secure configurations.
• Manage authentication and access controls across Microsoft Entra ID and on-prem Active Directory – MFA, Conditional Access, and federation via Entra Connect (OAuth 2.0 / OIDC and SAML; token configuration and lifetimes).
• Implement and troubleshoot single sign-on (SSO) for enterprise and SaaS applications (SAML/OIDC).
• Configure and secure service principles, app registrations, and managed identities – including credential rotation, API permissions, and least privilege for workload identities.
• Monitor security events and respond to incidents in a timely manner.
• Develop and maintain incident response plans and playbooks.
• Investigate and report on security breaches and recommend mitigation strategies.
• Conduct root cause analysis and forensic investigations to prevent future incidents.
• Stay up to date with emerging cybersecurity threats and technologies.
• Provide training and awareness programs for employees on cybersecurity best practices.
• Conduct phishing simulations and social engineering tests to measure awareness.
• Analyze threat intelligence reports to proactively strengthen security defenses.

  Requirements

  • Bachelor's degree in computer science, Information Security, or equivalent work experience.
  • Professional Security certification such as CISSP, CCSP, OSCP, etc.
  • Experience: 2-4 years of experience in information security, with a focus on security tooling and design.
  • Hands-on experience working in the Azure cloud platform.
  • Proficiency in security technologies such as SIEM, EDR, Encryption, Privileged Access Management.
  • Experience implementing Phishing Campaigns and Cyber Training.
  • Knowledge of Zero Trust security models and advanced security solutions (e.g. segmentation, Identity Federation, Conditional Access, etc.).
  • Experience with administration processes in both Windows and Linux space.
  • Ability to communicate and present security concepts to a wide range of audiences.
  • Familiarity with scripting and automation processes (PowerShell, Python, Bash).
  • Excellent analytical and problem-solving skills.
  • Strong communication and teamwork abilities.