Security Engineer

KRUSHLabs; Eindhoven; On-site; EUR 60,000 - 80,000; Full time

Job summary

KRUSHLabs in Eindhoven is seeking a hands-on Security Engineer to enhance its information security capabilities. This role involves collaborating closely with IT and R&D to address security risks and implement effective controls. Candidates should have a strong background in Microsoft 365 security and endpoint management.

The ideal applicant will have practical experience in vulnerability management and scripting, as well as the ability to document processes clearly. This is an exciting opportunity to contribute to next-generation radio communication systems.

Qualifications

• Strong practical experience in Microsoft 365 security, Entra ID, and identity security controls.
• Experience with endpoint security management and compliance.
• Familiarity with deploying and operationalizing SIEM capabilities.

Responsibilities

• Collaborate with IT and stakeholders to enhance technical security capabilities.
• Translate security risks and compliance requirements into actionable improvements.
• Deploy and operationalize SIEM capabilities effectively.

Skills

Microsoft 365 security

Endpoint security management

Vulnerability management

Security automation

Problem-solving

Communication skills

Education

Bachelor's or Master's degree in Information Security or related field

Tools

Microsoft Intune

PowerShell

Microsoft Graph

KQL

Job description

Job Summary

Our company is developing a cutting-edge wireless communication system to connect multiple portable devices. Long range, high data rates, low latency, resistance to interferences, and multipath make this problem particularly challenging, giving the candidate unique opportunities to research, design, and implement the next‑generation radio communication systems.

The Security Engineer will be part of the Information Security team and will play a key role in strengtheningKRUSHLabs’technical security capabilities. This role will work closely with IT and R&D to translate security risks, requirements, and audit findings into effective technical controls and sustainable security practices.

We are looking for a hands‑on, experienced security professional who can independently drive security improvements, challenge weak practices, and contribute to developing a pragmatic security function aligned with business needs.

Key Responsibilities

• Work as part of the Information Security team and closely collaborate with IT and other stakeholders to strengthen the company’s technical security capabilities and support the implementation of the information security program.
• Translate security risks, audit findings, compliance requirements, and management priorities into practical technical remediation actions, implementation plans, and measurable security improvements.
• Deploy, configure, and operationalize SIEM capabilities, including log source onboarding, data connector configuration, detection use case development, alert tuning, dashboards, workbooks, and operational handover.
• Support vulnerability management, patching, secure configuration, hardening activities, and technical control implementation across IT infrastructure, endpoints, cloud services, and relevant business systems.
• Develop and maintain automation, scripts, queries, and technical integrations using PowerShell, Microsoft Graph, KQL, or similar technologies to improve security operations and reduce manual effort.
• Document implemented controls, technical decisions, runbooks, operational procedures, and evidence required for audits, internal reviews, and continuous improvement of the security program.

Technical Qualifications Required

• Bachelor’s or Master’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience
• Strong practical experience in Microsoft 365 security, Entra ID, Conditional Access, and identity security controls.
• Hands‑on experience with endpoint security management, including Microsoft Intune, Microsoft Defender for Endpoint, device compliance, and security baselines.
• Practical experience with deploying, configuring, and operationalizing SIEM capabilities, including log source onboarding, data connector configuration, use case definition, alert tuning, and operational handover.
• Experience with KQL, detection logic, dashboards, workbooks, or security analytics rules.
• Understanding of vulnerability management, patching, secure configuration, and technical control implementation.
• Experience with scripting or automation, preferably using PowerShell, Microsoft Graph, or similar technologies.

Skills & Abilities Required

• Ability to translate security risks, requirements, and audit findings into practical technical remediation actions.
• Strong problem‑solving skills and the ability to investigate technical security issues independently.
• Good communication skills and the ability to work effectively with IT, R&D, and other stakeholders.
• Ability to clearly document implemented controls, technical decisions, runbooks, and operational procedures.