IT Security Engineer

About the role

LGT Capital Partners is looking for an IT Security Engineer who ensures that technical solutions across its environment are designed, implemented and operated in line with its security requirements. The role covers on-premises and cloud infrastructure, vulnerability management, incident support and collaboration with the external Security Operations Center.

Key responsibilities

• Research, design and implement security solutions for all managed components of the on-premises and cloud infrastructure.
• Integrate security into the evaluation, selection, deployment and configuration of hardware, software and cloud services.
• Define system security requirements that comply with security policies, regulatory requirements and industry best practices.
• Develop solutions to mitigate vulnerabilities and automate repeatable security processes.
• Operate and improve the vulnerability management process, including assessment of findings, prioritization and coordination of remediation.
• Collaborate with the external SOC to improve detection use cases, runbooks and incident workflows.
• Assist in responding to security incidents, penetration tests, red-team exercises and audits.
• Analyze infrastructure, cloud and security logs to spot trends, deviations and potential incidents.
• Support the review and update of cybersecurity policies, architectures, standards and guidelines.
• Act as a subject matter expert in virtual teams such as the CSIRT or Security Team, and take ownership of security products such as endpoint and identity solutions.
• Prepare clear technical documentation.

Required profile

• Thorough understanding of modern security principles, Zero Trust concepts, threat detection techniques and current attack vectors.
• Proven experience with Microsoft technologies (Active Directory, Group Policy Management, Entra ID / Azure AD, Conditional Access, Identity Protection).
• Experience with Microsoft Cloud Security Solutions (Microsoft 365 Defender, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Microsoft Sentinel).
• Hands-on experience deploying, configuring and administering Microsoft Sentinel, including workspace setup, data connector onboarding and cost/retention management.
• Strong command of Kusto Query Language (KQL) for threat hunting and log analysis.
• Experience connecting data sources via native and third-party connectors (CEF, Syslog, REST API, custom parsers) and ASIM normalization schemas.
• Knowledge of cost optimization strategies such as auxiliary log tiers, ingestion-time filtering and analytics versus basic logging.
• Experience collaborating with Cloud, DevOps and Endpoint teams to triage and remediate security findings, and with vulnerability scanning, risk assessment and remediation.
• Strong automation and scripting skills (PowerShell, Python) and solid problem-solving and stakeholder communication skills.

What we offer

• Modern working conditions, including work-from-home options, flexible hours and a home office allowance.
• A diverse, respectful culture and internal and external training opportunities, including German or English language courses.
• Favorable terms for participation in the company's investment programs and use of its banking products.