Security Engineer – Enterprise Cybersecurity

About the role

Software Finder is looking for an experienced Security Engineer to design, implement and continuously improve the company’s cybersecurity architecture across both on‑premises and cloud environments. The role will protect systems, applications, networks and data while ensuring compliance with industry‑standard security frameworks.

Key responsibilities

• Design, deploy and maintain enterprise security solutions in cloud and on‑premises environments.
• Manage and optimise security technologies such as NGFWs, VPNs, IDS/IPS, WAFs, EDR/XDR and network segmentation.
• Implement Zero‑Trust principles and secure remote‑access solutions.
• Develop and enforce hardening standards for servers, endpoints, cloud infrastructure and network devices.
• Monitor, investigate and respond to security incidents, including containment, eradication, recovery and post‑incident analysis.
• Create and maintain incident‑response playbooks, procedures and technical documentation.
• Administer IAM solutions including Microsoft Entra ID (Azure AD), MFA, SSO, Conditional Access, PIM and identity governance.
• Perform vulnerability assessments, security reviews and risk analysis, ensuring timely remediation.
• Support compliance initiatives and security audits aligned with ISO 27001, SOC 2, NIST, CIS and related standards.
• Collaborate with Infrastructure, Cloud, DevOps, Engineering and Product teams to embed security throughout projects.
• Manage SIEM platforms, endpoint protection and security‑automation tools.
• Mentor junior security engineers and promote security awareness across the organisation.

Required profile

• Proactive security professional with strong analytical thinking and leadership capabilities.
• Experience designing and operating security architectures in hybrid environments.
• Ability to work independently and coordinate cross‑functional teams during incidents.

Required skills

• Next‑Generation Firewalls (NGFW)
• VPN, IDS/IPS, Web Application Firewall (WAF)
• Endpoint Detection & Response (EDR/XDR)
• Zero‑Trust security principles
• Microsoft Entra ID / Azure AD, MFA, SSO, Conditional Access, Privileged Identity Management
• Vulnerability assessment and risk analysis tools
• SIEM platforms and security automation
• Knowledge of ISO 27001, SOC 2, NIST Cybersecurity Framework, CIS Controls