Security Engineer (IT Security)

What You’ll Do Security Operations and Incident Response Operate and automate security tooling (Microsoft Defender XDR, Entra ID, Wazuh SIEM) to protect the company's network, systems, and applications. Monitor and triage security events, investigate incidents, and propose measures to prevent recurrence; prepare incident reports. Handle user-reported phishing and maintain email protection controls. Plan and implement network security measures and define security requirements for operating systems, networks, and services. Endpoint and Access Security Manage device security and compliance through MDM (Intune, Kandji) and track remediation of endpoint vulnerabilities. Ensure access is granted based on business need; run periodic access reviews and cleanup of groups and permissions. Security Awareness Run the company-wide security awareness program: training materials on current threats, phishing simulations with results reports, and security communications to employees. Governance and Compliance Control compliance with corporate security standards and maintain related policies and procedures. Support internal and external audits (ISO/IEC 27001, SOC 2, BSI C5, PCI DSS), including evidence collection in Vanta and remediation of findings. Review the security of new third-party software, SaaS, and AI tools together with Legal. What We’re Looking For Experience in security operations or security engineering. Hands-on experience with the Microsoft security stack (Defender XDR, Entra I