Senior Cybersecurity Engineer (Hybrid)

Job Summary

We are looking for a hands-on Senior Cybersecurity Engineer to take ownership of the company's cybersecurity operations, protect internal infrastructure and business systems, and ensure security compliance across our software projects and cloud environments.

The candidate will serve as our primary in-house security specialist, working closely with IT, DevOps, and Development teams while coordinating with external security consultants when specialized expertise is required.

Key Responsibilities

Infrastructure & Endpoint Security

Secure internal networks, employee devices, servers, and corporate systems.

Cloud Security

Assess and secure Azure, Hetzner, and other cloud environments, including access controls, networking, and security configurations.

Identity & Access Management

Manage security controls for corporate accounts, MFA, privileged access, and user permissions.

Application Security

Identify and mitigate security vulnerabilities in web applications, APIs, WordPress, and production environments.

Security Monitoring

Implement and maintain security logging, alerting, and vulnerability monitoring.

Incident Response

Investigate security incidents, coordinate containment and recovery, and prepare incident reports.

Backup & Disaster Recovery Security

Review backup protection, recovery readiness, and resilience against ransomware and unauthorized access.

Security Governance

Develop and enforce security policies, conduct risk assessments, and maintain security documentation.

Client Security & Compliance

Support contractual security obligations, security audits, and client security assessments.

Third-Party Security

Evaluate security risks associated with vendors, external integrations, and AI tools.

External Security Coordination

Manage and validate specialized security assessments, penetration tests, and consultancy engagements performed by external providers.

Required Qualifications

• 4–6+ years of practical cybersecurity experience.
• Strong hands-on experience in infrastructure and network security.
• Experience securing cloud environments, particularly Microsoft Azure.
• Strong knowledge of IAM, MFA, endpoint protection, firewalls, VPNs, and network security.
• Experience with Linux and Windows server security.
• Knowledge of vulnerability management, security monitoring, and incident response.
• Understanding of web application security and OWASP Top 10.
• Familiarity with backup security, disaster recovery, and business continuity.
• Ability to conduct security assessments and implement remediation plans.
• Good English communication and technical documentation skills.

Preferred Qualifications

• Experience with Microsoft Defender, Azure WAF, Microsoft Entra ID, and SIEM solutions.
• Experience with Docker and CI/CD security.
• Familiarity with Google Workspace security administration.
• Experience with ISO 27001, NIST CSF, or similar frameworks.
• Certifications such as Security+, AZ-500, SC-200, or equivalent.