Cloud / M365 Security Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Deliver specialized ICT security services tailored for the client’s ICT environment and dedicated Microsoft 365 tenant.

• Oversee, validate, and escalate security reports and alerts.

• Respond to Microsoft 365 security incidents, addressing compromised accounts, suspicious emails, phishing/BEC, and other cloud-related threats.

• Engage in proactive threat hunting utilizing M365 security tools and relevant technologies.

• Establish, document, and uphold methods, procedures, and tools for threat detection and response.

• Execute incident response and digital forensics, coordinating suitable response actions.

• Monitor, disseminate, and act on pertinent threat intelligence and mitigation strategies.

• Conduct security assessments, verify vulnerabilities, prioritize, provide remediation guidance, and validate solutions.

• Issue security advisories and notifications that include remediation recommendations.

• Offer guidance to operations teams on system design, development, modifications, and security configuration baselines.

• Develop end-user security awareness materials and support awareness initiatives.

• Compile security reports and regular updates within governance frameworks.

• Identify and evaluate Operational Resilience controls and assist with Disaster Recovery Exercises.

• Participate in duty officer coverage outside of defined working hours for urgent security needs.

• Operate within applicable ICT governance, standards, security policies, and 5x8 defined working hours.

⛳️ Requirements

• A minimum of 7–10 years of progressively responsible experience in ICT security roles.

• At least 3 years of experience in cloud security operations for Microsoft 365/Azure environments.

• Expertise in security monitoring, incident response, and digital forensics.

• Practical experience with Microsoft Defender XDR, Microsoft Entra ID, Microsoft Sentinel or comparable SIEM/SOAR platforms, and advanced hunting using KQL.

• Proficient in threat intelligence handling, vulnerability management, and conducting security assessments across the system life cycle.

• Capable of developing methods, procedures, guidelines, standards, or policies with organization-wide implications.

• Microsoft Certified: Security Operations Analyst Associate (SC-200) or equivalent certification required.

• Possession of CISSP, CISM, GIAC, or other recognized security certifications is essential.

• Fluency in English, both written and oral, is mandatory.

• Desirable: Experience with Hyper Converged Infrastructure or Software Defined Storage.

• Desirable: Background in service reporting, business analytics, cloud storage, virtualization, operational resilience, disaster recovery, or experience with UN/NGO/peacekeeping and international missions.

• Desirable certifications include SC-100, AZ-500, CompTIA Security+/CySA+, and ITIL Foundation.

🏝️ Benefits

• Engagement as a contractor or freelancer.

• Availability of remote work in specified countries.

• Duty officer modality for urgent security needs outside of regular working hours.