Information Security Engineer

About the role

The Information Security Engineer will support our cybersecurity program by monitoring threats, managing identity and access, and implementing Microsoft security solutions. You will work closely with Information Security Management to identify risks, document controls, and drive remediation.

Key responsibilities

• Monitor, investigate and document alerts, events and incidents using Microsoft Defender and other approved tools.
• Administer Microsoft security technologies such as Microsoft Defender, Microsoft Entra ID, and Microsoft Purview.
• Review Conditional Access, MFA, privileged identity management and access‑control configurations.
• Conduct periodic user access reviews across Microsoft 365, cloud services and SaaS applications.
• Manage Data Loss Prevention, sensitivity labels and data classification activities.
• Assess endpoint security controls and provide recommendations.
• Perform technical security reviews of applications, cloud services and technology solutions.
• Validate vulnerability assessment results, prioritize risks and document remediation actions.
• Support governance, risk, compliance, audit and ISO/IEC 27001 activities.
• Track findings, remediation evidence and support security awareness initiatives.

Required profile

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT or a related field.
• 3‑5 years of experience in cybersecurity, security monitoring, incident investigation or vulnerability management.
• Strong analytical and investigative abilities with a solid understanding of cybersecurity principles.

Required skills

• Microsoft Defender
• Microsoft Entra ID
• Microsoft Purview (DLP, sensitivity labels, information protection)
• Conditional Access and Multi‑Factor Authentication (MFA)
• Privileged Identity Management (PIM) and Privileged Access Management (PAM)
• Identity Governance
• Endpoint protection and cloud security
• Vulnerability management
• ISO/IEC 27001 knowledge