Responsibilities

Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
Act as a cybersecurity subject‑matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards.
Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset.
Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture.
Lead end‑to‑end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams.
Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture.
Provide advanced troubleshooting and technical leadership for complex or high‑impact security issues.
Develop and maintain security documentation, standards, reports, and control frameworks.

Requirements

Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering.
Advanced expertise in Microsoft Azure security, including at least two of:

Defender for Cloud
Microsoft Sentinel




Infrastructure / Network Security (IaaS)
Application and API security
Storage and database security

Advanced expertise in Microsoft 365 security, including at least two of:

Microsoft Entra ID, identity and access management
Microsoft Purview, data protection and compliance
Microsoft 365 Defender suite
Intune / Endpoint Manager

Strong understanding of:

Security architecture principles, including Zero Trust, defense‑in‑depth and least privilege
Hybrid cloud environments and system integrations
Vulnerability management, including analysing penetration testing and coordinating remediation of results
API security and modern integration technologies

Scripting and automation skills, e.g., PowerShell, Python or Bash.
Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities.
Proven experience designing and implementing secure solutions in Microsoft technologies‑based enterprise environments.
Experience working with large‑scale or multi‑country IT environments.
Solid exposure to security operations, incident response and security tooling.
Experience collaborating across infrastructure, development and business teams.

Core Competencies
Demonstrates advanced expertise in Microsoft Azure and Microsoft 365 security, with a strong focus on vulnerability management, security architecture principles, and incident response. Proven ability to design and implement secure solutions in hybrid cloud environments while collaborating effectively across diverse IT teams.
Tools & Technologies

Microsoft Defender for Cloud
Microsoft Sentinel
Microsoft Purview
Microsoft 365 Defender
Intune
PowerShell
Python
Bash

#J-18808-Ljbffr

📌 Information Security Engineer (Madrid)
🏢 Jobtailor
📍 Madrid