Cloud Security Engineer

Trigyn Technologies Limited; Comunidad Valenciana; On-site; EUR 70,000 - 110,000; Full time

Job summary

Trigyn Technologies Limited in Valencia, Spain is seeking an experienced Cloud Security Expert for a 12-month onsite contract. The role focuses on Microsoft 365 security, threat detection, incident response, and cloud security operations within enterprise environments.

The candidate will monitor incidents, perform threat hunting, develop robust security procedures, and coordinate incident response while aligning with governance and DR plans. English fluency is required for this global engagement.

Qualifications

• Minimum 7–10 years in ICT security roles with cloud experience.
• Expert-level in security monitoring, incident response, and forensics.
• Hands-on with Defender XDR, Entra ID, and SIEM/SOAR platforms.
• Experience in threat intelligence, vulnerability management, and lifecycle assessments.

Responsibilities

• Monitor, verify, and elevate security reports and alerts from ICT security systems.
• Respond to Microsoft 365 security incidents including compromised accounts and threats.
• Conduct threat-hunting using M365 security tools and related tech.
• Maintain methods and tools for threat detection and response.
• Lead security incident response, forensics, and remediation guidance.
• Coordinate dissemination of threat intel and recommended controls.
• Perform security assessments across ICT environments and lifecycle.
• Issue advisories and remediation recommendations with updates.
• Verify vulnerabilities and ensure effective corrective actions.
• Advise operations on secure design and configuration baselines.
• Prepare end-user awareness materials and security training.
• Produce reports on security issues within governance framework.
• Identify OR controls and support DR exercises with ops teams.
• Participate in duty officer shifts outside standard hours for urgent needs.

Skills

Cloud security operations

Threat detection

Incident response

Security monitoring

Digital forensics

Microsoft Defender XDR

KQL

Threat intelligence

Vulnerability management

English communication

Tools

Microsoft 365 Defender

Microsoft Sentinel

Entra ID security

Job description

Trigyn is seeking an experienced Cloud Security Expert for a 12-month contractual opportunity based onsite in Valencia, Spain.

If you have expertise in Microsoft 365 security, threat detection, incident response, and cloud security operations, this could be your next opportunity!

Location: Valencia, Spain (Onsite)

Contract: 12 Months

Job Description

• Monitor, verify, and elevate security reports and alerts generated by designated ICT security systems and services.
• Monitor and respond to Microsoft 365 security incidents, including compromised accounts, suspicious e-mails, and other threats affecting the tenant.
• Conduct proactive threat-hunting activities using environment-specific capabilities, including M365 security tools and other relevant technologies, as appropriate.
• Establish, document, and maintain methods, procedures, and tools appropriate to the environment to support threat detection and response.
• Perform security incident response activities, including forensics analysis, and coordinate and advise on appropriate response measures for incidents detected by the team or reported/escalated to it from other sources.
• Monitor, share, and act on relevant threat intelligence, and coordinate the implementation of recommended measures where applicable to minimize exposure to associated risks.
• Perform regular security assessments of the ICT environment and systems throughout their life cycle (as appropriate) to identify potential security issues, provide guidance on effective remediation, and help minimize risk exposure.
• Issue security advisories and notifications to alert relevant operational teams to vulnerabilities affecting ICT systems, providing remediation recommendations including references to relevant security updates to effectively and promptly reduce exposure to associated risks.
• Verify vulnerabilities reported through various sources, notify relevant teams, provide appropriate recommendations for prompt remediation, and confirm the effectiveness of implemented corrective measures.
• Provide security-specific advice to operations teams to support system design, develop/ment, modification, and security configuration baselines in alignment with applicable architectural standards and security policies.
• Prepare and issue end-user awareness materials and support awareness initiatives to strengthen users' ability to recognize and respond appropriately to security threats.
• Prepare reports and provide regular updates on security-related issues, including incidents, in accordance with the established governance and reporting framework.
• Identify Operational Resilience (OR) controls for implementation and maintenance by the relevant operations teams across the covered ICT environment and systems, commensurate with business requirements, and perform OR assessments to verify correct implementation.
• Support Disaster Recovery Exercises (DRX) performed by the respective operations teams and coordinate the implementation of disaster recovery plans.
• Participate in the duty officer modality outside defined working hours, under specifically defined conditions, to support and respond to urgent security-specific needs, including incident response.

Experience & Certification

• Minimum 7–10 years of progressively responsible experience in ICT security roles, of which at least 3 years in cloud security operations for Microsoft 365 / Azure environments in enterprise or mission-critical settings.
• Demonstrated expert-level experience in security monitoring, incident response, and digital forensics, including response to compromised accounts, phishing/BEC, and other cloud borne threats.
• Proven hands-on experience with the Microsoft Defender XDR suite, Microsoft Entra ID security capabilities, and Microsoft Sentinel or equivalent SIEM/SOAR platforms, including advanced hunting (KQL).
• Demonstrated experience in threat intelligence handling, vulnerability management, and security assessments across the system life cycle.
• Demonstrated ability to develop methods, procedures, guidelines, standards, or policies with organization-wide impact, consistent with the Expert Support level.
• Experience supporting operational resilience, disaster recovery planning, and disaster recovery exercises is highly desirable.

Required / Desirable Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200) or equivalent — Required.
• CISSP, CISM, GIAC (e.g., GCIH, GCFA), or equivalent recognized security certification — Required (at least one).
• Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Azure Security Engineer Associate (AZ-500) — Desirable.
• CompTIA Security+ / CySA+ — An asset.
• ITIL Foundation — Desirable.

VI. Language

• Fluency in English, both written and oral, is required.

Service Scope

• Cloud & Collaboration Environment
• Security Monitoring & Response Systems
• Resilience & Recovery
• Microsoft 365 & Cloud Security
• Security Operations & Incident Response
• Vulnerability & Risk Management

TRIGYN TECHNOLOGIES is a multinational IT services company with resources deployed in 28 countries. TRIGYN is an ISO 9001:2015, ISO 27001:2022 (ISMS) and CMMI Level 5 certified company. TRIGYN has offices in the United States, Canada, Switzerland and India.