IT Security Engineer – Build & Mature Security Controls

About the role

We are looking for an IT Security Engineer to design, implement and continuously improve security controls across identity, endpoints, SaaS platforms and cloud infrastructure. The role sits at the intersection of IT, security and engineering, offering a hands‑on opportunity to shape the security foundation as the company scales.

Key responsibilities

• Partner with IT and engineering teams to strengthen security monitoring, detection and incident response, investigate events and maintain playbooks.
• Develop security metrics and reporting to provide visibility, support risk prioritisation and demonstrate control effectiveness.
• Improve identity and access management, privileged access, MFA, conditional access and device‑trust policies.
• Establish endpoint security standards, monitoring capabilities and remediation processes.
• Evaluate security considerations for new applications, vendors and integrations.
• Maintain and enhance cloud security controls and drive a secure‑by‑default approach.
• Build and operate a sustainable vulnerability management process across infrastructure, cloud and endpoints.

Required profile

• Hands‑on experience building security capabilities in a fast‑growing environment.
• Ability to work collaboratively with IT, engineering and business stakeholders.
• Strong analytical mindset with a focus on practical, business‑friendly security solutions.
• Openness to continuous learning and improving security programs, processes and automation.

Required skills

• Identity & Access Management (IAM) and privileged access management.
• Multi‑Factor Authentication (MFA) and conditional access.
• Endpoint Detection and Response (EDR) or equivalent endpoint security tools.
• Cloud security concepts and experience with major cloud platforms (AWS, Azure, GCP).
• Vulnerability management and remediation processes.