Security Engineer – ICT (Hands‑on Technical Role)

About the role

We are seeking a hands‑on Security Engineer to strengthen and evolve our ICT security posture. You will work directly with security tools, improve configurations, and own technical security initiatives from design through remediation.

Key responsibilities

• Hardening and securing Active Directory and Microsoft Entra ID.
• Improving identity and access management across Okta and Azure AD.
• Enhancing Microsoft Defender, CrowdStrike and Darktrace detections and tuning alerts.
• Investigating suspicious activity, supporting incident response and remediation.
• Securing endpoints and devices via Intune (Windows) and JAMF (Apple).
• Improving email security with Abnormal Security and Sendmarc.
• Protecting external applications and internal access using Cloudflare.
• Supporting the implementation of security controls as the AWS footprint expands.
• Assessing the current environment, identifying gaps and operationalising security improvements.

Required profile

• Strong practical experience in identity and access security, endpoint protection and system hardening.
• Hands‑on expertise with security monitoring, detection tuning and incident investigation.
• Ability to balance security enhancements with operational realities.
• Collaborative mindset, working closely with IT and infrastructure teams.

Required skills

• Active Directory
• Okta
• Microsoft Entra ID (Azure AD)
• Microsoft Defender
• CrowdStrike
• Darktrace
• Abnormal Security
• Sendmarc
• Cloudflare
• Intune (Windows)
• JAMF (Apple)
• AWS (basic security controls)