IT Security Engineer

IT Security EngineerImagine being the person standing between cutting‑edge aerospace innovation and the cyber threats trying to slow it down. As an IT Security Engineer at Destinus , you join the internal IT administration team to design, implement, and operate security controls that protect a distributed, cloud‑first environment built for speed and engineering excellence. Your work ensures our aerospace and defense critical technologies operate securely under strict national security requirements while enabling teams to move fast and innovate boldly.ResponsibilitiesSecurity architecture and strategyDevelop and implement IT security policies, standards, and procedures, evolving IT and cloud environments toward cybersecurity best practices and zero‑trust principles.Translate risk assessments, ISMS requirements, and regulatory obligations (ISO 27001, NIST, export control/defence standards) into technical controls.Contribute to cybersecurity roadmaps aligned with group strategy, including migration from a Google‑centric to a Microsoft‑based architecture.Cloud and enterprise security engineeringDesign and implement cybersecurity baselines for Microsoft 365, Entra ID, Intune, AWS, and on‑prem Unix and Microsoft systems, integrated with existing environments.Define and maintain secure configurations for identity and access management, conditional access, logging, and monitoring across cloud and on‑prem platforms.Collaborate with IT and engineering teams to harden Windows, macOS, and Linux endpoints using EDR, MDM, and configuration management tools.Monitoring, detection, and incident responseImplement and tune SIEM/SOAR detections (e.g., Microsoft XDR or equivalent) covering key attack surfaces.Define logging, alerting, and runbooks for IT support and operations teams.Lead or support investigations of complex cybersecurity incidents, including root‑cause analysis and remediation.Coordinate with the IT SOC team.Security operations and projectsOwn end‑to‑end delivery of major security initiatives, including scoping, solution design, implementation planning, and success metrics.Collaborate with IT on network segmentation, VPNs, and secure connectivity for offices, labs, and cloud workloads.Support vulnerability management and patching by providing prioritization and remediation guidance.Contribute to supplier and SaaS security assessments for tools used by Destinus.Deliver security awareness training and create user instructions.Governance, collaboration, and awarenessProvide technical input to policies, standards, and procedures for IT, cloud, and endpoint security.Work with the Global Information Security Manager on ISO 27001, Part‑IS, aviation/defence compliance, and customer audit support.Act as a cybersecurity subject‑matter expert for engineering teams, promoting secure‑by‑design practices in software and hardware development beyond IT.RequirementsBachelor's degree in computer science, information security, engineering, or equivalent practical experience.At least 5 years of solid, hands‑on experience in IT security engineering, systems engineering, or cloud security in a corporate or high‑tech environment.Demonstrable track record of delivering relevant security projects with measurable impact (e.g., hardening M365/Azure, rolling out EDR/XDR, SIEM onboarding, zero‑trust initiatives).Certifications such as CISSP, CISM, CEH, or equivalent are a plus.Strong experience with Microsoft 365 / Entra ID / Intune and AWS security configuration (identity, access, conditional access, logging, compliance).Good knowledge of at least one major cloud platform beyond Azure (e.g., AWS) from a security and operations perspective.Solid understanding of networking (TCP/IP, routing, VPN, firewalls, DNS) and how to apply segmentation and connectivity securely.Experience with SIEM/SOAR tools and log management (e.g., Microsoft Sentinel, Splunk, or similar).Experience with endpoint security and management (EDR, MDM, configuration management) across Windows, macOS, and preferably Linux.Ability to script/automate (PowerShell, Python, or similar) for policy deployment, hardening, and monitoring.Familiarity with information security management and risk handling – ISO/IEC 27001/27002, NIST CSF or SP 800‑53, and related controls.Experience working in or with regulated environments (aviation, defence, safety‑critical systems, or similar) is a strong plus.Understanding of secure software and infrastructure practices (least privilege, zero trust, secure configuration, change management).Who You AreYou are proactive by nature, spotting challenges early and driving technically and organizationally sound solutions all the way to completion. You thrive in a small, hands‑on IT team and collaborate seamlessly with security, engineering, and leadership across multiple European locations. You stay calm under pressure, manage incidents with confidence, and bring a continuous learning mindset to everything you do. Clear and direct communication in English comes naturally to you, both spoken and written, and any additional European language is a strong advantage.Benefits✨ The Thrill of the Future – Work on cutting‑edge projects that redefine aerospace.✨ Global Innovation Hub – Collaborate with top engineers from all over the world.✨ Fast‑Paced & High‐Growth – Experience the rush of working in a rapidly expanding company.✨ Real Impact – Your work won’t be theoretical—it will shape the future of flight.Destinus is an equal‑opportunity employer. We value diversity in our companies and teams and do not discriminate based on age, race, religion, color, country of origin, gender, sexual orientation, or disability status.Destinus – Challenge the limits of time, space, and human potential.#J-18808-Ljbffr