Senior Cybersecurity Engineer

Fexco; Killorglin; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Fexco is hiring a Senior Cybersecurity Engineer to own and advance cloud security across Azure and related security operations tooling. The role emphasizes hands-on IaC, threat detection and leadership within a hybrid, Kerry-based team.

You will design and implement controls, automate with Terraform/Bicep, and collaborate across IT, cloud, architecture and DevOps. Mentorship and architecture input are key parts of the role, with a focus on security maturity and incident response.

Qualifications

• 7+ years of experience in cybersecurity engineering cloud security or related disciplines.
• Hands-on experience securing cloud environments, especially Azure, with IaC capabilities (Terraform) to deploy secure cloud infrastructure.
• Experience implementing security controls using Azure-native capabilities (Policy, RBAC, Entra ID).
• Expert knowledge of SIEM, SOAR, EDR and IAM platforms (e.g., Defender, Sentinel, Cortex/XSIAM).
• Degree in Computer Science, Cybersecurity, Engineering or related field.

Responsibilities

• Design, implement and own security controls across Azure and other clouds, covering identity, network, workload and data protection.
• Write, review and maintain Terraform & Bicep/ARM configurations for secure infrastructure as code.
• Implement security controls using Azure-native capabilities and cloud security architecture best practices.
• Integrate and tune security tooling (Palo Alto Cortex/XSIAM, Defender/Sentinel).
• Translate threat intelligence into detection logic; build SOC use cases and playbooks.
• Mentor Cybersecurity Engineers and analysts; drive incident response, vulnerability management and continuous improvement.

Skills

Azure cloud security

Terraform

IAM / Entra ID

Azure Policy

SIEM / SOAR

Python / PowerShell

Leadership / mentoring

Communication

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering or related field

Tools

Terraform

Bicep/ARM

Palo Alto Cortex/XSIAM

Microsoft Defender / Sentinel

Microsoft Entra ID

Azure Policy

Job description

We are seeking a highly skilled Senior Cybersecurity Engineer to join our growing security team. This is a senior, high-impact engineering role focused on owning, implementing and advancing our security engineering in the cloud, such as Azure, and across our security operations tooling.

You will play a critical part in strengthening our ability to detect, respond to, and prevent threats, working at the forefront of modern security engineering, Azure security and security operations ownership.

This is a permanent, full-time, hybrid role. Based in Kerry. You will be required to come on-site one to two times per month to work with the cybersecurity team.

About the Role

As a Senior Cybersecurity Engineer, you will design, implement and own the security controls that protect Fexco's cloud environments, systems, data and infrastructure, with a particular focus on cloud security engineering in Microsoft Azure. You will work hands-on with Infrastructure as Code (Terraform,) to deploy and manage secure cloud infrastructure, alongside leading security technologies, developing detection logic, integrating threat intelligence, and improving visibility across the environment.

This role carries end-to-end ownership of one or more security operations capabilities, defining how they work, implementing them, operating them, and continuously improving them, rather than escalating decisions upward. You will operate with a high degree of autonomy while collaborating with cross-functional teams across IT, cloud, architecture, and DevOps, and contribute to mentoring engineers and SOC analysts.

What You'll Be Doing

• Design, implement and own security controls across Microsoft Azure and other cloud platforms, covering identity, network, workload and data protection
• Write, review and maintain Terraform (and Bicep/ARM) configurations to deploy and manage secure, compliant cloud infrastructure as code
• Implement and enforce security controls using Azure-native capabilities such as Azure Policy, Microsoft Entra ID/IAM, cloud security architecture, network security groups and Key Vault
• Integrate and tune security tooling across the environment, particularly using Palo Alto Cortex/XSIAM, along with Microsoft Defender/Sentinel
• Validate that security baselines and configurations align with best practices
• Translate threat intelligence into actionable detection logic, informed by Mitre ATT&CK
• Build, tune and maintain SIEM/SOAR use cases and correlation logic across platforms such as Palo Alto Cortex/XSIAM
• Analyse security events to identify gaps in visibility or detection capability
• Work with analysts to improve alert quality and reduce false positives

Incident Response & Vulnerability Management

• Act as a senior escalation point for complex security incidents
• Lead deep technical investigation, containment and remediation
• Own vulnerability management outcomes: prioritization, remediation tracking and reporting
• Drive improvements based on lessons learned from incidents
• Partner with IT, cloud, architecture and DevOps teams to embed security into day-to-day operations and project delivery
• Mentor and provide technical guidance to Cybersecurity Engineers and Cybersecurity analysts
• Contribute to architecture reviews, threat modelling and cross-team design discussions
• Promote security best practices across the organization

Documentation and Continuous Improvement

• Own and continuously improve security operations processes, playbooks, SOPs and engineering runbooks
• Set and track KPIs/SLAs for your area, and report on maturity and risk to the CISO
• Ensure security controls align with ISO 27001, NIST CSF, PCI DSS, NIS2 and DORA
• Help drive increased automation, efficiency and maturity across security operations

What We're Looking For

• 7+ years' experience in cybersecurity engineering cloud security, infrastructure security or related disciplines.
• Hands-on experience securing cloud environments, particularly Azure, with strong Infrastructure as Code (IaC) capabilities, able to write, review and maintain Terraform configurations to deploy and manage secure cloud infrastructure
• Experience implementing and enforcing security controls using Azure-native capabilities such as Azure Policy, RBAC and Microsoft Entra ID
• Expert knowledge of SIEM, SOAR, EDR and IAM platforms (e.g., Microsoft Sentinel, Microsoft Defender, Palo Alto Cortex/XSIAM), with particular depth in Azure cloud security architecture
• Degree in Computer Science, Cybersecurity, Engineering or related field
• Strong understanding of enterprise architecture, threat modelling and attacker TTPs
• Proven experience leading engineering projects and advising senior stakeholders
• Automation and scripting capability (Python, PowerShell) to support security engineering at scale
• Excellent communication skills with experience engaging technical and non-technical stakeholders.
• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500) or equivalent Azure security certifications (SC-100, SC-200, SC-300)
• Relevant industry certifications such as Microsoft Azure Security certifications (SC-100, SC-200, SC-300), CCSK, CCSP, CISSP, CISM or equivalent.
• Experience designing secure architectures for Azure, AWS or GCP
• Experience supporting regulated industries and compliance frameworks.
• Exposure to DevSecOps practices, Infrastructure-as-Code (Terraform, Bicep/ARM) and cloud-native security.

Why Join Us?

• Senior, high-impact ownership of cloud security engineering and security operations capability
• Help shape and evolve a maturing cybersecurity function
• Collaborate with a forward-thinking, cross-functional team

If you're a strong communicator who takes ownership of outcomes, mentors others, and stays current on the evolving threat landscape and Azure security tooling, we'd love to hear from you.

Fexco is an equal opportunities employer and is proud to foster a work environment where our people are supported and encouraged to be themselves. We welcome applicants of all backgrounds and sections of society, and each application is given fair consideration.