Cloud / M365 Security Engineer

1 day, 13 hours ago
Spektrum Group

Spektrum Group

Spektrum Group addresses contemporary challenges in the aerospace and defense sectors by providing innovative solutions tailored to the needs of defense, humanitarian, and government markets.

Professional Services
1-10
Founded 2019

Description

  • Monitor, verify, escalate, and respond to security alerts and incidents across Microsoft 365 and designated ICT security systems.
  • Investigate compromised accounts, suspicious emails, phishing/BEC, and other cloud-borne threats, including digital forensics activities.
  • Conduct proactive threat hunting using Microsoft 365 security tools, KQL, and other relevant technologies.
  • Develop, document, and continuously improve threat-detection and incident-response procedures, runbooks, and tools.
  • Collect, analyze, share, and act on threat intelligence; coordinate mitigation measures with relevant teams.
  • Perform lifecycle security assessments, configuration reviews, vulnerability verification, prioritization, remediation guidance, and corrective-action validation.
  • Issue security advisories and notifications for vulnerabilities, with recommended remediation and relevant security updates.
  • Advise operations teams on secure system design, modifications, and configuration baselines aligned with applicable standards and policies.
  • Prepare security reports, incident updates, end-user awareness materials, and support security-awareness initiatives.
  • Assess operational-resilience controls, support disaster-recovery planning and exercises, and provide urgent incident-response support through an out-of-hours duty-officer rotation.

Requirements

  • 7–10 years of progressively responsible ICT security experience, including at least 3 years in Microsoft 365/Azure cloud security operations in enterprise or mission-critical environments.
  • Expert experience in security monitoring, incident response, and digital forensics involving compromised accounts, phishing/BEC, and cloud threats.
  • Hands-on experience with Microsoft Defender XDR, Microsoft Entra ID security capabilities, and Microsoft Sentinel or an equivalent SIEM/SOAR platform.
  • Experience with advanced threat hunting using Kusto Query Language (KQL).
  • Experience in threat-intelligence handling, vulnerability management, and lifecycle security assessments.
  • Ability to develop security methods, procedures, guidelines, standards, or policies with organization-wide impact.
  • Microsoft Certified: Security Operations Analyst Associate (SC-200) or equivalent certification.
  • CISSP, CISM, GIAC certification (such as GCIH or GCFA), or equivalent recognized security certification.
  • Fluent written and spoken English.
  • Experience with operational resilience, disaster-recovery planning and exercises, international mission environments, cloud storage, virtualization, HCI/SDS, service reporting, or business analytics is preferred.
  • SC-100, AZ-500, CompTIA Security+/CySA+, or ITIL Foundation certifications are preferred.
  • Availability to work on-site in Valencia, Spain or Brindisi, Italy, or remotely from Poland, Romania, Czech Republic, Hungary, Portugal, Greece, Slovakia, or Bulgaria.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Freelance Cloud and Infrastructure Security Engineer

HITCONTRACT 11-50 Professional Services

Join an IT company’s security team as a Cloud and Infrastructure Security Engineer to assess and strengthen the multi-cloud infrastructure of a US public-sector SaaS provider.

Ansible AWS Azure Chef CI/CD Cloudflare Java Kubernetes .NET Node.js PHP Ruby SQL Server Terraform TLS TypeScript
2 days, 13 hours ago

Interim Head of Information Security

N-iX 1001-5000 Internet Software & Services

N-iX is seeking an Interim Head of Information Security for a 4–6-month engagement to lead a client’s security strategy, embed secure-by-design practices, and strengthen audit readiness and resilience.

Cybersecurity
5 days, 13 hours ago

Junior Cybersecurity Engineer

Quadcode 201-500 Internet Software & Services

Join Quadcode’s Security Team as a Junior Cybersecurity Specialist to help protect the corporate infrastructure supporting its global fintech and SaaS trading-platform operations.

Agile Ansible AWS Bash Chef Confluence Cybersecurity GitLab GPT Kubernetes Linux macOS Network Security Python Splunk Terraform
1 week, 4 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers