Senior Cybersecurity Engineer

Fexco; Munster; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Fexco is seeking a Senior Cybersecurity Engineer to own and advance cloud security, focusing on Microsoft Azure, Infrastructure as Code (Terraform/Bicep), and security-ops tooling within a hybrid Kerry-based team. You will design controls, implement secure infrastructure, and guide cross-functional partners.

You will mentor engineers and analysts, collaborate with IT, cloud, architecture, and DevOps, and drive improvements aligned with ISO 27001, NIST CSF, PCI DSS, and DORA.

Qualifications

• 7+ years in cybersecurity engineering cloud security or related fields.
• Hands-on Azure security with IaC (Terraform) experience.

Responsibilities

• Design, implement and own security controls across Azure and other cloud platforms.
• Write and maintain IaC configurations for secure cloud infrastructure.
• Integrate security tooling (Defender, Sentinel, Cortex) and enforce baselines.

Skills

Terraform

Azure Policy

Entra ID

SIEM

SOAR

EDR

IAM

Python

PowerShell

Threat modelling

Stakeholder mgmt

Education

Bachelor's degree in Computer Science or related

Tools

Microsoft Defender

Azure Sentinel

Palo Alto Cortex

Cortex/XSIAM

Terraform

Bicep/ARM

Vulnerability Management Tools

Job description

We are seeking a highly skilled Senior Cybersecurity Engineer to join our growing security team. This is a senior, high-impact engineering role focused on owning, implementing and advancing our security engineering in the cloud, such as Azure, and across our security operations tooling.

You will play a critical part in strengthening our ability to detect, respond to, and prevent threats, working at the forefront of modern security engineering, Azure security and security operations ownership.

This is a permanent, full-time, hybrid role. Based in Kerry. You will be required to come on-site one to two times per month to work with the cybersecurity team.

About the Role

As a Senior Cybersecurity Engineer, you will design, implement and own the security controls that protect Fexco's cloud environments, systems, data and infrastructure, with a particular focus on cloud security engineering in Microsoft Azure. You will work hands-on with Infrastructure as Code (Terraform,) to deploy and manage secure cloud infrastructure, alongside leading security technologies, developing detection logic, integrating threat intelligence, and improving visibility across the environment.

This role carries end-to-end ownership of one or more security operations capabilities, defining how they work, implementing them, operating them, and continuously improving them, rather than escalating decisions upward. You will operate with a high degree of autonomy while collaborating with cross-functional teams across IT, cloud, architecture, and DevOps, and contribute to mentoring engineers and SOC analysts.

What You'll Be Doing

Cloud & Infrastructure Security

• Design, implement and own security controls across Microsoft Azure and other cloud platforms, covering identity, network, workload and data protection
• Write, review and maintain Terraform (and Bicep/ARM) configurations to deploy and manage secure, compliant cloud infrastructure as code
• Implement and enforce security controls using Azure-native capabilities such as Azure Policy, Microsoft Entra ID/IAM, cloud security architecture, network security groups and Key Vault
• Integrate and tune security tooling across the environment, particularly using Palo Alto Cortex/XSIAM, along with Microsoft Defender/Sentinel
• Validate that security baselines and configurations align with best practices

Threat Detection & Monitoring

• Translate threat intelligence into actionable detection logic, informed by Mitre ATT&CK
• Build, tune and maintain SIEM/SOAR use cases and correlation logic across platforms such as Palo Alto Cortex/XSIAM
• Analyse security events to identify gaps in visibility or detection capability
• Work with analysts to improve alert quality and reduce false positives

Incident Response & Vulnerability Management

• Act as a senior escalation point for complex security incidents
• Lead deep technical investigation, containment and remediation
• Own vulnerability management outcomes: prioritization, remediation tracking and reporting
• Drive improvements based on lessons learned from incidents

Collaboration & Mentorship

• Partner with IT, cloud, architecture and DevOps teams to embed security into day-to-day operations and project delivery
• Mentor and provide technical guidance to Cybersecurity Engineers and Cybersecurity analysts
• Contribute to architecture reviews, threat modelling and cross-team design discussions
• Promote security best practices across the organization

Documentation and Continuous Improvement

• Own and continuously improve security operations processes, playbooks, SOPs and engineering runbooks
• Set and track KPIs/SLAs for your area, and report on maturity and risk to the CISO
• Ensure security controls align with ISO 27001, NIST CSF, PCI DSS, NIS2 and DORA
• Help drive increased automation, efficiency and maturity across security operations

What We're Looking For

Essential

• 7+ years' experience in cybersecurity engineering cloud security, infrastructure security or related disciplines.
• Hands-on experience securing cloud environments, particularly Azure, with strong Infrastructure as Code (IaC) capabilities, able to write, review and maintain Terraform configurations to deploy and manage secure cloud infrastructure
• Experience implementing and enforcing security controls using Azure-native capabilities such as Azure Policy, RBAC and Microsoft Entra ID
• Expert knowledge of SIEM, SOAR, EDR and IAM platforms (Microsoft Sentinel, Microsoft Defender, Palo Alto Cortex/XSIAM), with particular depth in Azure cloud security architecture
• Degree in Computer Science, Cybersecurity, Engineering or related field
• Strong understanding of enterprise architecture, threat modelling and attacker TTPs
• Proven experience leading engineering projects and advising senior stakeholders
• Automation and scripting capability (Python, PowerShell) to support security engineering at scale
• Excellent communication skills with experience engaging technical and non-technical stakeholders.

Desirable

• Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500) or equivalent Azure security certifications (SC-100, SC-200, SC-300)
• Relevant industry certifications such as Microsoft Azure Security certifications (SC-100, SC-200, SC-300), CCSK, CCSP, CISSP, CISM or equivalent.
• Experience designing secure architectures for Azure, AWS or GCP
• Experience supporting regulated industries and compliance frameworks.
• Exposure to DevSecOps practices, Infrastructure-as-Code (Terraform, Bicep/ARM) and cloud-native security

Why Join Us?

• Senior, high-impact ownership of cloud security engineering and security operations capability
• Help shape and evolve a maturing cybersecurity function
• Collaborate with a forward-thinking, cross-functional team

If you're a strong communicator who takes ownership of outcomes, mentors others, and stays current on the evolving threat landscape and Azure security tooling, we'd love to hear from you.

Fexco is an equal opportunities employer and is proud to foster a work environment where our people are supported and encouraged to be themselves. We welcome applicants of all backgrounds and sections of society, and each application is given fair consideration.