Cybersecurity Engineer

We are looking to incorporate a Senior Cybersecurity Engineer into our CYBER projects unit, capable of designing, implementing, operating, and proposing improvements in cloud, identity, endpoint, network, monitoring, and Artificial Intelligence security domains. You will work for one of our direct clients, a multinational in the transport sector. Availability for a hybrid work model is required (2 days remote work, 3 days in the office in the Viladecans area). REQUIREMENTS, * Cloud and Zero Trust Architectures: Design and support cloud security architectures and Zero Trust models (Microsoft Azure, Microsoft 365, and SaaS).

• Identity Management: Support identity architecture using Microsoft Entra ID (SSO, MFA, Conditional Access, PIM, and lifecycle management).
• Security by Design: Integrate ‘Secure by Design’ principles into technological initiatives, application architectures, and digital capabilities.
• Microsoft and Endpoint Platforms: Configure capabilities in Defender, Entra, Purview; deploy and optimize CrowdStrike Falcon for endpoints and workloads.
• Edge Security and Resilience: Support Akamai tools (WAF, bot mitigation, CDN) and design backup plans, ransomware recovery, and cloud resilience.

1. Security Platform Operation * Microsoft Stack Management: Operate Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office, Defender for Cloud, and Defender for Cloud Apps. * Data Protection and Governance: Administer DLP configurations, Information Protection, Insider Risk, Communication Compliance, and SaaS governance (SCIM, OAuth permissions, SSPM). * Technical Hygiene: Conduct continuous configuration reviews, health assessments, and technical audits on deployed platforms.

2. Detection Engineering and Monitoring * Telemetry Integration: Connect new log sources and native connectors to the SIEM and monitoring ecosystem. * Use Cases with the SOC: Collaborate with the SOC to optimize alerts, reduce false positives, refine use cases, and support advanced incident investigation.

3. Security Advisory * Internal Consulting: Advise technology, digital, data, and business teams on security by design reviews and technical architectures. * Vendor Management: Participate in discussions with third parties on control design and integration of secure architectures.

4. Continuous Improvement and AI Security * Posture Evaluation (Secure Score): Perform audits based on Microsoft and Azure Secure Score to identify and execute quick remediations. * AI Governance: Evaluate the security of Artificial Intelligence use cases (Microsoft Copilot, use of Shadow AI tools, and DSPM for AI).

• Professional Experience: Demonstrated experience in cybersecurity engineering, security architecture, or advanced security operations.
• Key Technologies: Solid practical experience in Microsoft Defender XDR, Entra ID, Purview, CrowdStrike Falcon, Microsoft Azure, and Akamai (WAF/CDN).
• Desirable Knowledge: Zero Trust architecture, SaaS/SSPM governance, detection engineering, cyberattack/ransomware resilience, and regulatory frameworks (NIS2, ISO 27001, NIST CSF, or aviation sector regulations).
• Competencies: Risk-based thinking, ability to execute the transition from architecture to technical operation, communication skills, and detailed documentation elaboration.

Company Description Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology. Technology is in our DNA, and we believe in it as a lever capable of driving change for improvement, maintaining a balance that allows us to offer our clients top-level technological tools, always with the closeness and professionalism of a team that acts as a guide along the way. Devoteam has been committed to technology in the service of people for over 30 years. With more than 10,000 people in the group, in 20 countries across Europe, the Middle East, and Africa.