Information Security Engineer

Jobtailor; Madrid; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

Jobtailor is seeking a Senior Cloud Security Engineer to design, implement, and maintain robust security controls across Microsoft 365, Azure, and hybrid environments in our Madrid-based teams. You will act as a cybersecurity SME for Europe, guiding secure design and incident response while collaborating with stakeholders to embed security from the outset.

You will drive security architecture improvements, manage vulnerabilities, and support secure development across applications,

Formación

• Minimum 3 years in cloud security or enterprise cybersecurity engineering.
• Expertise in Microsoft Azure security including Defender for Cloud or Sentinel and IaaS inputs.
• Advanced expertise in Microsoft 365 security including Entra ID, Purview, Defender, or Intune.
• Strong understanding of Zero Trust, defense-in-depth, and least privilege.
• Experience with vulnerability management and remediation coordination.
• Experience with large-scale, multi-country IT environments.

Responsabilidades

• Design, implement, and maintain security controls across Microsoft 365, Azure, and hybrid environments.
• Act as cybersecurity SME for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
• Embed security into application, infrastructure, identity, endpoint, and integration architectures (APIs/data flows).
• Collaborate with architects, engineers, project teams, and stakeholders to define security requirements from the outset.
• Collaborate with SOC and CSIRT teams to support incident response activities and lessons learned.
• Lead end-to-end vulnerability management activities, including scanning, assessments, and remediation tracking.
• Identify, assess, and mitigate security risks across cloud and enterprise environments to improve posture.
• Provide advanced troubleshooting and technical leadership for complex security issues.
• Develop and maintain security documentation, standards, and control frameworks.

Conocimientos

Cloud security

Security architecture

Vulnerability management

Incident response

API security

Herramientas

PowerShell

Python

Bash

Descripción del empleo

Responsibilities

• Design, implement, and maintain robust security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
• Act as a cybersecurity subject‑matter expert for Europe and Country IT teams providing clear, practical guidance on secure design and implementation.
• Assist in embedding security into application, infrastructure, identity, endpoint, and integration architectures (including APIs and data flows), ensuring alignment with secure development lifecycle practices and architectural standards.
• Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements as integral part of enterprise initiatives and technology solutions from the outset.
• Work closely with SOC and CSIRT teams to support incident response activities, including investigation, containment, and remediation, and ensure lessons learned are reflected in improved controls and architecture.
• Lead end‑to‑end vulnerability management activities, including vulnerability scanning, assessments, penetration testing coordination, and remediation tracking with system owners and technical teams.
• Identify, assess, and mitigate security risks across cloud and enterprise environments, driving measurable improvements in the firm’s security posture.
• Provide advanced troubleshooting and technical leadership for complex or high‑impact security issues.
• Develop and maintain security documentation, standards, reports, and control frameworks.

Requirements

• Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering.
• Advanced expertise in Microsoft Azure security, including at least two of:
  • Defender for Cloud
  • Microsoft Sentinel
  • Infrastructure / Network Security (IaaS)
  • Application and API security
  • Storage and database security
• Advanced expertise in Microsoft 365 security, including at least two of:
  • Microsoft Entra ID, identity and access management
  • Microsoft Purview, data protection and compliance
  • Microsoft 365 Defender suite
  • Intune / Endpoint Manager
• Strong understanding of:
  • Security architecture principles, including Zero Trust, defense‑in‑depth and least privilege
  • Hybrid cloud environments and system integrations
  • Vulnerability management, including analysing penetration testing and coordinating remediation of results
  • API security and modern integration technologies
• Scripting and automation skills, e.g., PowerShell, Python or Bash.
• Strong interest in security architecture, with a desire to deepen exposure and grow toward architectural responsibilities.
• Proven experience designing and implementing secure solutions in Microsoft technologies‑based enterprise environments.
• Experience working with large‑scale or multi‑country IT environments.
• Solid exposure to security operations, incident response and security tooling.
• Experience collaborating across infrastructure, development and business teams.

Core Competencies

Demonstrates advanced expertise in Microsoft Azure and Microsoft 365 security, with a strong focus on vulnerability management, security architecture principles, and incident response. Proven ability to design and implement secure solutions in hybrid cloud environments while collaborating effectively across diverse IT teams.

Tools & Technologies

• Microsoft Defender for Cloud
• Microsoft Sentinel
• Microsoft Purview
• Microsoft 365 Defender
• Intune
• PowerShell
• Python
• Bash