endpoint security engineer

Coca-Cola HBC

<div>
 
 
 Department:
 
 Cyber Security &amp; Data Privacy Platform
 
 
 
 Location:
 
 Egypt, Greece, Bulgaria
 
 
 
 
 
 We are seeking a skilled and motivated
 
 Endpoint Security Engineer
 
 with expertise in administering Email Antispam and EDR solutions to join our cybersecurity team. In this role, you will be responsible for designing, implementing, and managing our email security and endpoint protection solutions. Your knowledge of Proofpoint's antispam capabilities and Microsoft Defender's advanced endpoint protection features will be crucial in safeguarding our organization against email-borne threats and endpoint vulnerabilities. The position will be reported directly to the Product Manager responsible for Endpoint Security.
 
 
 
 
 
 
 YOUR NEW KEY RESPONSIBILITIES:
 
 
 
 &bull; Design, deploy, and manage our company antispam solution to ensure effective filtering of inbound and outbound emails, blocking spam, phishing attempts, and malicious attachments.
 
 
 &bull; Configure policies for content filtering, URL categorization, and email encryption.
 
 
 &bull; Day to day configuration support and administration.
 
 
 &bull; Implement and manage EDR to provide advanced protection against malware, ransomware, and other endpoint vulnerabilities.
 
 
 &bull; Utilize threat intelligence and behavior-based analytics to detect and respond to security threats across endpoints.
 
 
 &bull; Develop and enforce email security and endpoint protection policies aligned with industry best practices and organizational requirements.
 
 
 &bull; Configure detection rules, custom policies, and security baselines for endpoints.
 
 
 &bull; Optimize Antispam and EDR configurations for accurate threat detection and minimal false positives.
 
 
 &bull; Maintain relationships with Proofpoint and Microsoft representatives, staying updated about product updates, patches, and security enhancements.
 
 
 &bull; Employee Training and Awareness.
 
 
 &bull; Ability to work as on call: It will be required to participate to the team&rsquo;s on call shift one week per month.
 
 
 
 
 
 
 ARE THESE YOUR SECRET INGREDIENTS?
 
 
 
 &bull; Bachelor&rsquo;s degree in computer science, Information Security, or related field (or equivalent experience).
 
 
 &bull; 5 years of proven experience as an Engineer with expertise in Antispam and EDR solutions.
 
 
 &bull; Experience with Proofpoint or Microsoft Defender for Endpoint will be considered as a plus.
 
 
 &bull; Experience with Privileged access management systems or network security tools will be considered as a plus.
 
 
 &bull; Strong understanding of email security protocols, antispam mechanisms, and endpoint protection concepts.
 
 
 &bull; Experience with email threat analysis, malware detection, and endpoint vulnerability assessment.
 
 
 &bull; Familiarity with email authentication mechanisms (SPF, DKIM, DMARC) and endpoint detection and response (EDR) tools.
 
 
 &bull; Excellent problem-solving skills and the ability to respond to security incidents promptly.
 
 
 &bull; Strong communication skills to collaborate with technical and non-technical stakeholders.
 
 
 &bull; English proficiency is a MUST
 
 
 
 
 
 
 BENEFITS:
 
 
 
 &bull; Competitive compensation and comprehensive benefits package.
 
 
 &bull; Opportunity to work with cutting-edge email security and endpoint protection technologies.
 
 
 &bull; Collaborative and innovative work environment.
 
 
 &bull; Continuous learning and professional development opportunities.
 
 
 &bull; Contribution to enhancing the organization's email and endpoint security posture.
 
 
 
 
 
 
 ABOUT YOUR NEW TEAM:
 
 
 
 We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact.
 
 
 We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth.
 
 
 We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don&rsquo;t have the perfect experience. We have faith in what every person can be. And although we have so much to be proud of, we always stay humble. We believe the real magic happens &ndash; for us and for you &ndash; when we OPEN UP.
 
 
 
 
 
 
 AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE
 
 
 
 At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.
 
</div>

Endpoint Security Engineer

Montefiore Einstein

<div>City/State:
Elmsford, New York
Grant Funded:
No
Department:
IT - Security Operations
Work Shift:
Day
Work Days:
MON-FRI
Scheduled Hours:
8:30 AM-5 PM
Scheduled Daily Hours:
7.5 HOURS
Pay Range:
$120,000.00-$150,000.00 
 
Job Summary
 
 
The Cybersecurity Engineer is an individual contributor responsible for designing, implementing, operating, and maintaining technical security controls that protect clinical systems, patient data, and enterprise infrastructure across a large, complex healthcare environment. This role emphasizes hands-on engineering, operational excellence, and close collaboration with architecture, SOC, cloud, infrastructure, and compliance teams to ensure security controls are effective, resilient, and aligned with regulatory requirements (HIPAA, HITECH, NYSDOH, etc.). As a Cybersecurity Engineer in a large healthcare system, you directly support patient safety, clinical operations, and the protection of sensitive health information. This role provides the opportunity to work deeply with modern security technologies while contributing to a mission-driven organization where cybersecurity is essential to care delivery.
 
 
Essential Functions
<ul><li>Perform assigned security engineering tasks under guidance.
</li><li>Escalate complex issues appropriately.
</li><li>Maintain security technologies across network, endpoint, identity, cloud, and logging domains.
</li><li>Perform hands-on troubleshooting of security tooling, integrations, and agent deployments.
</li><li>Maintain security controls in alignment with enterprise architecture standards and engineering best practices.
</li><li>Develop and maintain technical documentation, runbooks, and standard operating procedures.
</li><li>Automate security tasks using scripting and infrastructure-as-code where appropriate.
</li></ul> 
Qualifications
<ul><li>BS Required
</li><li>1-3 years Fundamental understanding of cloud, network, email, and endpoint security. Required and
</li><li>1-3 years Foundational understanding of cybersecurity threats, attack vectors, and mitigation strategies. Required and
</li><li>1-3 years Strong analytical and problem-solving skills. Required and
</li><li>1-3 years Ability to interpret logs and alerts. Preferred and
</li><li>1-3 years Ability to perform scripting (Python, PowerShell, Bash). Preferred and
</li><li>1-3 years Excellent technical documentation skills. Preferred and
</li><li>1-3 years Strong verbal and written communication skills. Preferred and
</li><li>1-3 years Knowledge of NIST CSF and NIST 800-series standards. Preferred and
</li><li>Endpoint and workload protection (EDR/XDR, server and container security). (Medium proficiency)
</li><li>Cloud and hybrid security engineering (AWS, Azure, GCP). (Medium proficiency)
</li><li>Data protection technologies. (Medium proficiency)
</li><li>Secure third-party and vendor integrations. (Medium proficiency)
</li><li>Change management and operational reliability. (Low proficiency)
</li><li>Maintain secure connectivity between on-prem and cloud environments. (Medium proficiency)
</li><li>Support regulatory compliance requirements in cloud environments. (Medium proficiency)
</li><li>CompTIA Security+ or equivalent foundational certification. within 1 Year Preferred or
</li><li>Cloud security certifications (CCSP, AWS or Azure Security Specialty) within 1-1/2 Yrs Preferred or
</li>GIAC certifications (GSEC, GCED, GCIH, GCIA) within 1-1/2 Yrs Preferred or 
<li>
</li></ul> 
Montefiore Health System, Inc. is an equal employment opportunity employer. Montefiore Health System, Inc. will recruit, hire, train, transfer, promote, layoff and discharge associates in all job classifications without regard to their race, color, religion, creed, national origin, alienage or citizenship status, age, gender, actual or presumed disability, history of disability, sexual orientation, gender identity, gender expression, genetic predisposition or carrier status, pregnancy, military status, marital status, or partnership status, or any other characteristic protected by law.</div>

Cybersecurity Engineer

Intelligent Technical Solutions

<div>Job Description

We are seeking a CMMC Security Engineer to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.

Job Responsibilities
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
Job Qualifications 
Required Technical Experience
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
Strongly Preferred Technical Experience
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
Required Certifications

(must hold at least two from this list):
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
Preferred Certifications

(significant advantage):
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
Skills &amp; Competencies
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
Compensation

 Pay rate ranges from $120,000.00/annum up to $170,000.00/annum and may vary by experience and location.

Benefits
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div>

CMMC Security Engineer (US Hybrid)

Seneca Resources Company, LLC

<div>
 
 
 Position Title:
 
 Cybersecurity Engineer - Data Loss Prevention &amp; Messaging Security
 
 
 Location:
 
 Remote (VA, AL, DC, DE, FL, GA, IL, IN, KS, KY, LA, MI, MD, MN, MO, NC, NE, NJ, OH, PA, SC, TX, VA, WV)
 
 
 Pay Rate:
 
 $90.00/hr
 
 
 Position Description:
 
 
 
 Join a dynamic team as a Cybersecurity Engineer specializing in Data Loss Prevention (DLP) and Messaging Security. This remote contract role focuses on securing cloud and email communications within a regulated banking environment. You will lead the deployment and governance of ShareFile integrations with Microsoft 365, ensuring data protection, identity security, and compliance. The position offers the chance to apply your expertise in DLP, email security, endpoint protection, and network security to protect sensitive financial data. Collaborate with diverse teams to implement security controls, enhance lifecycle management, and improve overall security posture in a fast-paced financial services organization. This is an excellent opportunity to leverage your cybersecurity skills and make a meaningful impact on enterprise data security.
 
 
 
 
 
 Top Requirements:
 
 
 <ul>
 <li>
 Banking or financial services industry experience (strongly preferred)
 </li>
 <li>
 Hands-on Data Loss Prevention (DLP) engineering experience (email, endpoint, network)
 </li>
 <li>
 Microsoft 365 / Exchange / Outlook security expertise
 </li>
 <li>
 Check Point Smart-1 &amp; Endpoint Security experience
 </li>
 <li>
 5+ years of enterprise cybersecurity engineering experience
 </li>
 </ul>
 
 At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.
 
 
 When you work with Seneca, you&rsquo;re choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path. Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way.
 
 
 Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.
 
</div>

Cybersecurity Engineer - Data Loss Prevention & Messaging Security

STC Bahrain

stc Bahrain provides telecommunications and digital services across Bahrain.At stc Bahrain, cybersecurity roles usually sit within Business Products &amp; Solutions / ICT / SOC (Security Operations / Enterprise Security) teams.Core Responsibilities:Depending on level (SOC Analyst, Engineer, or Specialist), typical duties include:1. Threat Monitoring &amp; DetectionMonitor security alerts from SIEM tools and SOC systemsDetect suspicious network activity and cyber threatsAnalyze logs from servers, endpoints, and cloud systems2. Incident ResponseInvestigate cyber incidents (malware, phishing, breaches)Contain and escalate security threatsSupport recovery and forensic analysis3. Security OperationsMaintain firewalls, IDS/IPS, endpoint protection toolsApply security patches and updatesEnsure network and cloud security compliance4. Risk &amp; ComplianceSupport cybersecurity audits and risk assessmentsEnsure alignment with ISO 27001 and telecom security standardsDocument vulnerabilities and mitigation plans5. Enterprise &amp; Cloud Security (advanced roles)Secure cloud platforms and applicationsManage identity/access control systemsSupport Zero Trust security frameworksstc also operates a large SOC and AI-driven cybersecurity ecosystem protecting networks, cloud, and enterprise systemsSkills &amp; Requirements:Bachelor&rsquo;s in IT / Computer Science / CybersecurityCertifications (preferred):Security+ / CEH / CISSP / CCNA SecurityKnowledge of:SIEM tools (Splunk, QRadar)Firewalls, endpoint security, IDS/IPSStrong analytical and incident handling skillsUnderstanding of telecom or enterprise networks is a plusPay: From RO1,000.000 per monthWork Location: In person

Cybersecurity (stc Bahrain)

<div><h3 class="jobSectionHeader">About the job</h3>

The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data.

The Information Security Engineer works closely with the IT &amp; InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.

The shift for this positions is 08.00 - 17.00 CET/CEST with Saturday &amp; Sunday off.
<h3 class="jobSectionHeader">
Responsibilities</h3>

Security Engineering &amp; Control Implementation:
<ul>
<li>Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments.</li>
<li>Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access.</li>
<li>Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems.</li>
</ul>
Cloud &amp; Infrastructure Security Architecture:
<ul>
<li>Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity.</li>
<li>Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks.</li>
<li>Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC).</li>
</ul>
Identity &amp; Acess Security (Entra ID &amp; M365):
<ul>
<li>Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation.</li>
<li>Review, assess, and refine authentication and access control configurations.</li>
<li>Conduct periodic privileged access audits and align identity practices with Zero Trust principles.</li>
</ul>
Security Monitoring &amp; Threat Engineering:
<ul>
<li>Tune and enhance SIEM/Sentinel detections, automation, and response playbooks.</li>
<li>Develop KQL detection queries aligned to threat behaviours and emerging attack patterns.</li>
<li>Improve signal fidelity across Defender platforms and integrate new data sources</li>
</ul>
Incident Response &amp; Digital Forensics Support:
<ul>
<li>Serve as technical escalation during high-severity incidents.</li>
<li>Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity.</li>
<li>Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis).</li>
<li>Implement long-term remediation items and drive post-incident improvements.</li>
</ul>
Vulnerability &amp; Risk Management
<ul>
<li>Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms.</li>
<li><ul><li>Validate remediation efforts with system owners and ensure alignment to risk thresholds.</li></ul></li>
<li><ul><li>Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks.</li></ul></li>
</ul>
Compliance, Governance &amp; ISO 27001 Alignment
<ul>
<li>Implement and maintain controls aligned with ISO 27001:2022 requirements.</li>
<li>Support evidence collection, audit preparation, and remediation of nonconformities.</li>
<li>Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams.</li>
</ul>
Automation, Scripting &amp; Continuous Improvement
<ul>
<li>Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions.</li>
<li>Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting.</li>
<li>Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation.</li>
</ul>
Collaboration &amp; Knowledge Leadership
<ul>
<li>Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making.</li>
<li>Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation.</li>
<li>Deliver internal training, knowledge-transfer sessions, and documentation.</li>
</ul>
Ticket Resolution &amp; Request Fulfilment
<ul>
<li>Respond to and resolve incidents and requests within the agreed SLAs.</li>
<li>Handle user and complex incidents across Azure, AVD, and M365; drive quick MTTR and reduce ticket reopens via robust post-resolution notes and KB updates.</li>
<li>Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments).</li>
<li>Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions.</li>
<li>Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope).</li>
</ul><h3 class="jobSectionHeader">About You</h3>

Required Experience
<ul>
<li>4+ years of experience in information security engineering, cloud security, or infrastructure security roles.</li>
<li>Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems.</li>
<li>Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel.</li>
<li>Experience with secure cloud networking, identity governance, and Zero Trust principles.</li>
<li>Experience supporting complex incident response investigations.</li>
<li>Familiarity with ITIL processes (incident, change, problem).</li>
<li>Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR).</li>
</ul>
Technical Skills
<ul>
<li>Azure security architecture, governance, and configuration.</li>
<li>Advanced Entra ID identity governance and access control.</li>
<li>Endpoint and cloud threat detection (Defender suite).</li>
<li>SIEM/SOAR engineering (Sentinel, Logic Apps).</li>
<li>PowerShell, automation, and API integration.</li>
<li>KQL, log analysis, and detection engineering.</li>
<li>Infrastructure-as-Code familiarity (Bicep/ARM/Terraform).</li>
<li>Secure network design, segmentation, and encryption practices.</li>
</ul>
Soft skills
<ul>
<li>Customer focused: prioritizing the needs and satisfaction of users and clients in every interaction.</li>
<li>Communication: effective communication skills to collaborate with cross-functional teams, management, and external stakeholders.</li>
<li>Collaborative: working effectively with cross-functional teams to achieve common goals.</li>
<li>Innovative: consistently seeking new ideas and approaches to solve problems and improve processes.</li>
<li>Problem-solving: analytical mindset to identify gaps and recommend solutions.</li>
<li>Adaptability: the infrastructure, security, and client landscape evolve rapidly, so adaptability is crucial.</li>
</ul>
The following qualifications are mandatory:
<ul>
<li>CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)</li>
<li>SC-300: Identity &amp; Access Administrator</li>
</ul>
The following qualifications would be advantageous:
<ul>
<li>AZ-500: Azure Security Engineer</li>
<li>SC-200: Security Operations Analyst</li>
<li>ISO 27001: 2022 Foundations</li>
</ul><h3 class="jobSectionHeader">We offer</h3>
<ul><li>The flexibility to work 100% remotely with no wasted commute time and travel costs.</li>
<li>A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients.</li>
<li>A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages - where we celebrate everyone's uniqueness.</li>
<li>Innovative digital tools, and continuous opportunities for learning and development.</li>
<li>Access to Udemy Business for learning and development.</li>
<li>Fun employee engagement activities and participation in 5CA employee-lead communities such as 5CA Connect, Pride, 5CA Gamers, Women of 5CA, to name a few.</li>
<li>Location-specific benefits</li></ul></div>

Information Security Engineer [Remote]

Mexa Global (PVT) LTD

Job Description:MGC Freight is seeking a highly skilled DevOps / IT Infrastructure &amp; Security Engineer with hands-on experience in cloud infrastructure, endpoint security, server management, and data protection. This job role is based in Bahria Town Lahore and the ideal candidate will be responsible for maintaining secure, scalable systems and ensuring compliance with international data security standards.Responsibilities:<ul><li>Design, implement, and manage secure cloud infrastructure on Amazon Web Services</li><li>Manage server-side infrastructure (Linux/Windows servers, networking, storage)</li><li>Implement and maintain endpoint security solutions (EDR/XDR, antivirus, device control)</li><li>Configure Identity &amp; Access Management (IAM), role-based access, and security policies</li><li>Build and maintain CI/CD pipelines for secure deployments</li><li>Monitor systems using logging, alerting, and SIEM tools</li><li>Conduct security testing, vulnerability assessments, and penetration testing</li><li>Ensure data security, encryption, backup, and disaster recovery strategies</li><li>Implement compliance frameworks including GDPR and data protection standards</li><li>Harden infrastructure against threats and manage firewalls, VPNs, and network security</li><li>Collaborate with development teams to enforce DevSecOps best practices</li></ul>Requirements:<ul><li>4 years of experience in DevOps / IT Security / Infrastructure roles</li><li>Strong expertise in AWS (EC2, S3, RDS, VPC, IAM, CloudWatch, Lambda)</li><li>Experience with server management (Linux/Unix, Windows Server)</li><li>Hands-on experience with containerization (Docker, Kubernetes)</li><li>Knowledge of endpoint security tools and device management</li><li>Experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI)</li><li>Strong understanding of network security, firewalls, VPNs</li><li>Familiarity with security testing tools (Nmap, Burp Suite, OWASP practices)</li><li>Understanding of data protection, encryption, and compliance (GDPR)</li><li>Experience with log monitoring and SIEM tools</li></ul>Why Join MGC Freight Company:<ul><li>Competitive salary and benefits</li><li>Opportunity to work on real-world logistics platforms</li><li>Career growth and learning opportunities</li><li>Collaborative and innovative work environment</li></ul>Location: Bahria Town LahoreHow to Apply:Email your resume with mentioning the job title at hr@mgcfreight.com OR drop on Whatsapp: 0304-4827485Pay: From Rs130,000.00 per monthApplication Question(s):<ul><li>hich of the following AWS services have you worked with professionally? </li></ul>EC2 S3 RDS VPC IAM CloudWatch Lambda<ul><li>Do you have hands-on experience with containerization and CI/CD tools?</li><li>Are you comfortable working onsite in Bahria Town, Lahore?</li></ul>Experience:<ul><li>DevOps, IT Infrastructure, or Cyber Security roles?: 4 years (Required)</li></ul>Work Location: In person

IT Infrastructure Engineer

Search 10000+ Endpoint security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.