IT Security Administrator / Security Engineer

Job description

As an IT Security Administrator / Security Engineer, you will be the primary technical owner of security-related topics within the Managed Services team.

You will independently coordinate and handle day-to-day security operations across customer environments, identify security risks and vulnerabilities, recommend remediation actions and ensure that agreed security controls are properly implemented and maintained.

While network security will remain an important part of the role, your responsibilities will cover a broader security landscape including identity, endpoints, cloud, vulnerability management, security monitoring and incident response.

You will work closely with infrastructure, network, Microsoft 365 and Service Desk engineers, while acting as the technical point of contact for security matters.

Responsibilities

• Take technical ownership of operational security topics across managed customer environments.
• Identify security risks, vulnerabilities and configuration weaknesses and drive remediation activities.
• Manage and continuously improve security configurations and policies across network, cloud, identity and endpoint environments.
• Coordinate vulnerability management activities, including vulnerability assessment, prioritization, remediation tracking and verification.
• Investigate security alerts and incidents and coordinate technical response and remediation activities.
• Maintain and improve security baselines and hardening standards.
• Manage and review security controls within Microsoft Entra ID, including Conditional Access, MFA, privileged access and identity-related security policies.
• Work with endpoint and cloud security solutions such as Microsoft Defender and related Microsoft security technologies.
• Administer and review network security controls including firewalls, VPNs, IDS/IPS, web filtering and segmentation.
• Work with technologies such as Fortinet, Zscaler, Microsoft Azure, Cisco and Check Point.
• Lead implementation of Zero Trust, least privilege and identity-driven security principles.
• Review security events, logs and monitoring information and identify areas requiring investigation or improvement.
• Support security audits, assessments and compliance activities from a technical perspective.
• Maintain security documentation, procedures, risk registers and remediation plans.
• Provide security guidance to L1/L2 engineers and support escalation of security-related incidents.
• Cooperate directly with customers and third-party security providers where required.
• Proactively propose improvements to the security posture of managed environments.

Required technical and professional expertise

• Hands-on experience in IT security operations or security administration.
• Strong understanding of security principles across identity, endpoints, networks and cloud environments.
• Experience with vulnerability management and remediation processes.
• Practical knowledge of Microsoft Entra ID, MFA, Conditional Access and identity security.
• Experience with Microsoft security technologies such as Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365 or Defender for Cloud.
• Understanding of security monitoring, log analysis and incident investigation.
• Knowledge of common security hardening practices and security baselines.
• Understanding of Zero Trust and least privilege principles.
• Ability to independently investigate security issues, assess risk and propose appropriate remediation.
• Ability to translate technical security findings into clear actions and recommendations.
• Good understanding of enterprise networking fundamentals.
• English at minimum B2 level.

Nice to have

• Experience with SIEM solutions and security monitoring platforms.
• Experience with Microsoft Sentinel or similar SIEM/SOC technologies.
• Knowledge of Microsoft Intune and endpoint security policies.
• Knowledge of security frameworks such as ISO 27001, NIST CSF or CIS Controls.
• Experience supporting security audits or compliance assessments.
• Experience working in an SLA-driven Managed Services environment.
• Familiarity with ITIL-based Incident, Change and Problem Management.
• Security certifications such as Microsoft SC-200 / SC-300, Fortinet FCP, CompTIA Security+, CISSP or equivalent.
• German language skills.

What we are looking for

We are looking for someone who is comfortable taking ownership rather than waiting for individual security tasks to be assigned.

You should be able to assess a security issue, determine its priority, involve the appropriate technical teams and drive the topic through to resolution.

This role is a good fit for someone who wants to combine hands-on technical work with increasing responsibility for the overall security posture of customer environments.

Benefits

• B2B or employment contract
• 100% remote work
• Flexible working schedule
• Working with modern cloud and security technologies
• Opportunities to enhance your qualifications through certifications and training
• Industry-leading healthcare and comprehensive medical coverage
• Customizable 1-on-1 English or German lessons
• Modern computer equipment
• Employee referral programme
• Team-building events and company get-togethers

Take ownership of security in international customer environments and help continuously improve how security is delivered as part of Managed Services.