Cybersecurity Specialist

Quick Facts

• Role: Cybersecurity Specialist

• Focus areas: Zero Trust security architecture, L3 incident response, Sentinel detections & threat hunting, identity/access protection, and Azure/Microsoft 365 security improvements

Description

You will develop and advance the organization’s cybersecurity domain and its long-term direction. The role includes building security architecture and standards based on Zero Trust and security by design, managing Sentinel detections and threat hunting, and handling security incidents at L3 level with root-cause analysis and remediation coordination. You will also strengthen protections across Entra ID, Microsoft 365, Intune, Microsoft Defender, and Azure services.

Responsibilities

• Develop security architecture, standards, and technical controls using Zero Trust and security-by-design principles

• Manage Microsoft Sentinel, create KQL detections, perform threat hunting, analyze security logs, and automate incident response

• Investigate and resolve security incidents at L3, including root-cause analysis and coordination of corrective actions

• Protect identities and access in Entra ID (Conditional Access, MFA, PIM, Identity Protection, Access Reviews)

• Improve security for Microsoft 365, Intune, and Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps)

• Improve Azure security (RBAC, managed identities, Key Vault, network segmentation, Azure Policy, Defender for Cloud)

• Assess security of new systems, cloud services, technical changes, external vendors, and AI solutions

• Manage vulnerabilities, support penetration testing, test recovery, and develop incident response and disaster recovery plans

• Expand employee security awareness, including training and phishing simulations

• Collaborate with the IT team, IT risk manager, compliance, and external security partners

Requirements

• Practical experience with cyber security in Microsoft Azure and Microsoft 365 environments

• Strong knowledge of Entra ID and identity/access security

• Experience with Microsoft Sentinel and Microsoft Defender and handling security incidents

• Understanding of cloud, endpoint, and network security

• Practical KQL skills to create/modify detections and analyze security data independently

• Ability to take ownership of the assigned security area and propose concrete security controls

• Ability to communicate security topics with both IT colleagues and non-technical users

Benefits

• Stable employer with long-standing tradition in the Czech market

• Flexible working hours

• Wide choice of benefits (e.g., up to 5 additional days off, Multisport card, support such as DIP, life insurance, on-site refreshments, mobile plan for family members)

• Modern offices in central Prague near metro lines B and C, with parking options