Security Engineer

About the role

Arcera’s Amoun affiliate is seeking a Security Engineer to design, implement and continuously improve cybersecurity controls across its Azure, Microsoft 365 and hybrid environments. The role safeguards the confidentiality, integrity and availability of systems and data while supporting compliance, risk management and incident response.

Key responsibilities

• Implement, configure and manage security controls in Azure, Microsoft 365 and hybrid environments using Microsoft Defender for Cloud, Microsoft Sentinel, Defender for Endpoint, Office 365, Identity, Cloud Apps, Purview and Entra ID.
• Conduct security assessments, vulnerability scanning and coordinate patching and remediation across cloud resources, endpoints and applications.
• Ensure compliance with regulations such as GDPR, ISO 27001 and NIST by applying DLP, IRM, audit logging and reporting through Purview.
• Support the Security Operations Centre in incident response – investigate alerts, contain threats, perform root‑cause analysis and enhance detection processes.
• Administer security awareness training, monitor phishing reports and manage quarantine actions.
• Produce and maintain documentation including risk assessments, security policies, runbooks, architecture diagrams and security‑posture metrics.

Required profile

• Minimum 4 years of experience in cybersecurity, with at least 3 years focused on Microsoft security technologies.
• Strong written and spoken English.
• Experience in a GxP environment is a plus.
• Relevant Microsoft or security certifications are advantageous.
• Analytical problem‑solving, effective communication with non‑technical stakeholders and ability to work independently under pressure.

Required skills

• Microsoft Azure
• Microsoft 365 security stack
• Microsoft Defender for Cloud, Sentinel, Endpoint, Office 365, Identity, Cloud Apps
• Microsoft Purview (DLP, eDiscovery, compliance)
• Entra ID (Azure AD)
• Vulnerability scanning and patch management
• Data loss prevention (DLP) and information rights management (IRM)
• Audit logging and compliance reporting
• Risk assessment and security policy development
• Runbook and architecture diagram creation