Security Engineer (IT Security)

What You’ll Do

Security Operations and Incident Response

• Operate and automate security tooling (Microsoft Defender XDR, Entra ID, Wazuh SIEM) to protect the company's network, systems, and applications.
• Monitor and triage security events, investigate incidents, and propose measures to prevent recurrence; prepare incident reports.
• Handle user-reported phishing and maintain email protection controls.
• Plan and implement network security measures and define security requirements for operating systems, networks, and services.

Endpoint and Access Security

• Manage device security and compliance through MDM (Intune, Kandji) and track remediation of endpoint vulnerabilities.
• Ensure access is granted based on business need; run periodic access reviews and cleanup of groups and permissions.

Security Awareness

• Run the company-wide security awareness program: training materials on current threats, phishing simulations with results reports, and security communications to employees.

Governance and Compliance

• Control compliance with corporate security standards and maintain related policies and procedures.
• Support internal and external audits (ISO/IEC 27001, SOC 2, BSI C5, PCI DSS), including evidence collection in Vanta and remediation of findings.
• Review the security of new third-party software, SaaS, and AI tools together with Legal.

What We’re Looking For

• Experience in security operations or security engineering.
• Hands-on experience with the Microsoft security stack (Defender XDR, Entra ID, Intune, Exchange Online) and a SIEM.
• Solid understanding of networking and of Windows, macOS, and Linux administration.
• Familiarity with ISO/IEC 27001, SOC 2, and other security compliance frameworks.
• Scripting skills for automation (PowerShell, Python, or Bash).
• Ability to explain security topics to non-technical audiences; fluent English.

Nice to have:

• Experience with Vanta or a similar compliance automation platform.
• Relevant certifications (e.g., Microsoft SC-200, CompTIA Security+ / CySA+) are a strong advantage.

Benefits

At Gcore, we want you to do your best work and enjoy the journey. Our benefits are designed to support your growth, well-being, and life beyond work: 

• Competitive compensation 
• Flexible working hours and hybrid or remote options, depending on your role 
• Work from anywhere in the world for up to 45 days per year 
• Private medical insurance for you and your family* 
• Extra paid vacation and sick leave days* 
• Support for life’s important moments and celebrations 
• Language courses to help you connect and grow 
• Modern, welcoming offices with snacks, drinks, and entertainment* 
• Team sports and social activities* 

*Benefits may vary depending on your location. 

Equal Opportunity Employer

We provide equal opportunity to all applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity, gender expression, national origin, disability, or any other legally protected characteristics.