Cybersecurity Operations Engineer

The ideal candidate brings a combination of hands-on security engineering, IT operations, risk management, and security testing experience. This individual will collaborate with internal IT teams, business stakeholders, and Managed Security Services Providers (MSSPs) to implement security controls, address vulnerabilities, and continuously improve the organization’s overall security posture., * Serve as the primary technical liaison to Managed Security Services Providers (MSSPs), overseeing security operations, vulnerability assessments, incident response, and remediation activities. \n

• Implement and maintain enterprise security controls across Microsoft 365, Azure Entra ID, Intune, SaaS applications, cloud environments, and endpoint systems. \n

• Manage identity and access security, including SSO, MFA, privileged access management, user provisioning, and least-privilege access controls. \n

• Conduct authorized vulnerability assessments, penetration testing, attack-path analysis, and security risk assessments to identify and remediate threats. \n

• Support security monitoring, incident investigations, threat analysis, containment, recovery, and continuous security improvements. \n

• Maintain security risk registers, policies, operational procedures, incident response documentation, and audit evidence. \n

• Partner with IT, Legal, Privacy, and Compliance teams to support regulatory requirements, security audits, and ISO/NIST-aligned security frameworks. \n

• Automate security and operational workflows using Python, PowerShell, Power Automate, or comparable technologies. \n

• Support endpoint protection, patch management, asset inventories, secure configurations, and third-party vendor security assessments. \n

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered. \n

• Minimum of 3 years of experience in cybersecurity, security engineering, IT operations, infrastructure security, or a related discipline. \n

• Hands-on experience supporting enterprise endpoints, cloud environments, SaaS applications, and identity management systems. \n

• Strong experience with Microsoft 365, Azure Entra ID, Intune, or comparable enterprise security and endpoint management platforms. \n

• Working knowledge of vulnerability management, penetration testing, incident response, network security monitoring, and digital forensics. \n

• Understanding of SSO, SAML, MFA, privileged access management, and identity lifecycle management. \n

• Familiarity with firewalls, intrusion detection/prevention systems, EDR solutions, SIEM platforms, and common cybersecurity threats. \n

• Experience scripting and automating operational processes using Python, PowerShell, or similar technologies. \n

• Experience supporting security audits, compliance assessments, evidence collection, and technical documentation. \n

• Working knowledge of GDPR and familiarity with German and Swiss privacy regulations. \n

• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills. \n, * Security certifications such as CompTIA Security+, Cloud+, OSCP, PNPT, GPEN, CEH, or equivalent credentials. \n

• Experience conducting penetration tests, red-team exercises, or adversary simulations. \n

• Experience with Microsoft Defender, SIEM, EDR, vulnerability scanning tools, and cloud security platforms. \n

• Familiarity with ISO 27001, ISO 27701, ISO 42001, and the NIST Cybersecurity Framework. \n

• Experience with third-party risk assessments, vendor security reviews, or international privacy compliance. \n

• Experience using Jira Service Management, Confluence, SharePoint, Power BI, or related enterprise platforms. \n