IT Security Engineer

About the role

Destinus develops Unmanned Aerial Vehicles (UAVs) for the defence industry and works with government agencies and defence organisations worldwide. As an IT Security Engineer, you will design, implement and manage security solutions across a cloud-first IT infrastructure, working closely with IT and engineering teams and the Global Information Security Manager. You will strengthen cybersecurity, ensure compliance with national security requirements and respond to emerging threats.

Key responsibilities

• Design and implement security policies, technical controls and zero-trust solutions aligned with ISO 27001, NIST and defence industry requirements.
• Secure Microsoft 365, Entra ID, Intune, AWS and on-premises infrastructure, including identity management, access controls and system hardening.
• Support the migration from Google-based to Microsoft-based IT architecture, keeping security in mind.
• Implement and optimise SIEM/SOAR, EDR/XDR, logging and monitoring solutions to detect and respond to threats.
• Investigate security incidents, coordinate with the SOC team and drive remediation and continuous improvement.
• Lead cybersecurity projects covering network segmentation, VPNs, vulnerability management, endpoint protection and secure connectivity.
• Embed security best practices with IT and engineering teams, support security audits, regulatory compliance, supplier assessments and employee security awareness.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience.
• At least 5 years of hands-on experience in IT security, systems engineering or cloud security, with proven delivery of security projects.
• Proven experience securing Microsoft 365, Entra ID, Intune, AWS and Windows/macOS/Linux environments.
• Fluent English and strong communication skills; able to work in fast-paced, international environments.

Required skills

• SIEM/SOAR, EDR/XDR, endpoint management and security monitoring tools such as Microsoft Sentinel or Splunk.
• Networking, firewalls, VPNs, identity management, zero-trust architecture and secure configurations.
• Scripting and automation with PowerShell, Python or similar.
• Knowledge of ISO 27001/27002, NIST frameworks, risk management and security compliance.