Cyber Security Engineer

About the role

Vitol is seeking a Cyber Security Engineer to design, implement and maintain security architecture across its on‑premises environments. The role combines offensive security, incident response and threat‑hunting to protect critical energy trading infrastructure.

Key responsibilities

• Design, implement and maintain security architecture for on‑premises systems.
• Monitor, detect, triage and respond to security incidents (L2/L3), managing the full incident lifecycle.
• Operate and tune Microsoft Sentinel (SIEM/SOAR), creating detection rules, analytic queries and automated playbooks.
• Leverage Varonis for data access governance, insider‑threat detection and abnormal‑behaviour alerts.
• Plan and execute internal Red Team engagements, including scoping, adversary simulation and debrief.
• Run AI/LLM‑powered penetration‑testing tools and conduct offensive assessments with Burp Suite, BloodHound and C2 frameworks.
• Manage alerts from CrowdStrike Falcon and Microsoft Defender, and perform threat hunting across endpoint, network and cloud telemetry.
• Implement and manage identity and access management solutions, focusing on privileged access and lateral‑movement mitigation.
• Develop and maintain security documentation such as Red Team playbooks, IR runbooks and lessons‑learned reports.

Required profile

• Minimum 3 years of hands‑on cybersecurity experience with a focus on offensive security or incident response.
• OSCP certification is required; additional certifications such as OSEP or OSED are a plus.

Required skills

• Microsoft Sentinel (SIEM/SOAR)
• Varonis data governance
• Red Team planning and execution
• AI/LLM‑based penetration‑testing tools
• Burp Suite, BloodHound, C2 frameworks
• CrowdStrike Falcon, Microsoft Defender
• Threat hunting techniques
• Identity and access management, privileged access controls