Senior Cybersecurity Engineer

We are looking for a hands-on Senior Cybersecurity Engineer to take ownership of the company's cybersecurity operations, protect internal infrastructure and business systems, and ensure security compliance across our software projects and cloud environments. The candidate will serve as our primary in-house security specialist, working closely with IT, DevOps, and Development teams while coordinating with external security consultants when specialized expertise is required. Key Responsibilities - Infrastructure & Endpoint Security: Secure internal networks, employee devices, servers, and corporate systems. - Cloud Security: Assess and secure Azure, Hetzner, and other cloud environments, including access controls, networking, and security configurations. - Identity & Access Management: Manage security controls for corporate accounts, MFA, privileged access, and user permissions. - Application Security: Identify and mitigate security vulnerabilities in web applications, APIs, WordPress, and production environments. - Security Monitoring: Implement and maintain security logging, alerting, and vulnerability monitoring. - Incident Response: Investigate security incidents, coordinate containment and recovery, and prepare incident reports. - Backup & Disaster Recovery Security: Review backup protection, recovery readiness, and resilience against ransomware and unauthorized access. - Security Governance: Develop and enforce security policies, conduct risk assessments, and maintain security documentation. - Client Security & Compliance: Support contractual security obligations, security audits, and client security assessments. - Third-Party Security: Evaluate security risks associated with vendors, external integrations, and AI tools. - External Security Coordination: Manage and validate specialized security assessments, penetration tests, and consultancy engagements performed by external providers. Required Qualifications - 4 6+ years of practical cybersecurity experience. - Strong hands-on experience in infrastructure and network security. - Experience securing cloud environments, particularly Microsoft Azure. - Strong knowledge of IAM, MFA, endpoint protection, firewalls, VPNs, and network security. - Experience with Linux and Windows server security. - Knowledge of vulnerability management, security monitoring, and incident response. - Understanding of web application security and OWASP Top 10. - Familiarity with backup security, disaster recovery, and business continuity. - Ability to conduct security assessments and implement remediation plans. - Good English communication and technical documentation skills. Preferred Qualifications - Experience with Microsoft Defender, Azure WAF, Microsoft Entra ID, and SIEM solutions. - Experience with Docker and CI/CD security. - Familiarity with Google Workspace security administration. - Experience with ISO 27001, NIST CSF, or similar frameworks. - Certifications such as Security+, AZ-500, SC-200, or equivalent.

Desired Candidate Profile

Required Qualifications - 4 6+ years of practical cybersecurity experience. - Strong hands-on experience in infrastructure and network security. - Experience securing cloud environments, particularly Microsoft Azure. - Strong knowledge of IAM, MFA, endpoint protection, firewalls, VPNs, and network security. - Experience with Linux and Windows server security. - Knowledge of vulnerability management, security monitoring, and incident response. - Understanding of web application security and OWASP Top 10. - Familiarity with backup security, disaster recovery, and business continuity. - Ability to conduct security assessments and implement remediation plans. - Good English communication and technical documentation skills. Preferred Qualifications - Experience with Microsoft Defender, Azure WAF, Microsoft Entra ID, and SIEM solutions. - Experience with Docker and CI/CD security. - Familiarity with Google Workspace security administration. - Experience with ISO 27001, NIST CSF, or similar frameworks. - Certifications such as Security+, AZ-500, SC-200, or equivalent.