Azure Security Engineer - Secure SDLC & Cloud Posture

Kantar XTEL; España; A distancia; EUR 55.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote or Hybrid working set-up

Flexible working hours

Competitive Salary Package and Bonus

Descripción de la vacante

XTEL is seeking a Cybersecurity Engineer to strengthen security posture across our platform, applications, and Microsoft environment. You’ll join a growing Security & Compliance team that already maintains a mature compliance foundation (ISO 27001:2022, SOC 2 Type 2, SOC 1 Type 2, ISAE 3402) and an established GRC function, alongside a managed SOC, an IT team, and a Cloud Operations team.

This is a very hands-on role where you’ll lead vulnerability management, work with Engineering and Product

Formación

• 3+ years in cybersecurity engineering, security operations, DevSecOps, or security-focused IT (Azure preferred).
• Vulnerability management: prioritizing and driving remediation across teams.
• AppSec and SDLC controls (CI/CD security, SAST/DAST/IAST/SCA).
• Microsoft environments security: Entra ID, Intune, CA, M365 controls.
• Azure cloud security and CSPM knowledge.
• Self-directed, able to work with limited guidance.
• Strong communication and ownership across multiple teams.
• English proficiency.

Responsabilidades

• Own intake, triage, risk-based prioritization, remediation tracking, validation, SLAs, and reporting for Azure environments and the dev pipeline.
• Improve secure SDLC with CI/CD security gates, SAST/DAST/IAST/SCA, and secure code review.
• Hardening of Microsoft environment including identity, endpoint protections, and M365 controls.
• Coordinate SOC-driven remediation and root-cause follow-up.
• Coordinate external penetration tests and internal testing.
• Support patch management with IT and Cloud Operations.
• Partner with Cloud Operations on Azure security architecture and CSPM.
• Support security audits and evidence collection for ISO 27001/SOC/ISAE.
• Translate findings into actionable guidance for engineers and GRC inputs.
• Identify opportunities to raise security across the organization.

Conocimientos

Cybersecurity engineering

Security operations

DevSecOps

Azure security

CI/CD security

AppSec

Threat modeling

Communication

Self-direction

Herramientas

SAST

DAST

IAST

SCA

Code scanning

Entra ID

Descripción del empleo

XTEL is seeking a Cybersecurity Engineer to strengthen security posture across our platform, applications, and Microsoft environment. You’ll join a growing Security & Compliance team that already maintains a mature compliance foundation (ISO 27001:2022, SOC 2 Type 2, SOC 1 Type 2, ISAE 3402) and an established GRC function, alongside a managed SOC, an IT team, and a Cloud Operations team.

This is a very hands-on role where you’ll lead vulnerability management, work with Engineering and Product