- Company Name
- Power Factors
- Job Title
- Engineer Infosec, Security Operations (Hyrbrid in Greece)
- Job Description
-
**Job Title**
Information Security Engineer – Security Operations
**Role Summary**
Provide technical support for security incidents escalated from a 24x7 managed SOC, manage and optimize security tooling across endpoint and cloud environments, and collaborate with IT and Cloud teams to secure Microsoft Entra ID and Azure, AWS, and GCP infrastructures.
**Expectations**
- Minimum 3 years of hands‑on information‑security experience.
- Expert use of Microsoft Sentinel and Microsoft Defender suite (Endpoint, Identity, Cloud).
- Experience securing cloud endpoints in Azure, AWS, GCP, including CNAPP solutions such as Wiz.
- Proficiency in identity access management, MFA, and cloud IAM.
- Knowledge of industry standards (NIST CSF, NERC CIP, GDPR) and MITRE ATT&CK tactics.
- Strong analytical skills and ability to communicate complex security concepts to technical and executive stakeholders.
**Key Responsibilities**
1. Investigate, analyze, and remediate incidents reported by the SOC and internal teams.
2. Conduct phishing and suspicious web content investigations.
3. Configure, maintain, and optimize security tools: EDR, EPM, CNAPP, SIEM (Microsoft Sentinel).
4. Work with Cloud Operations to ensure cloud endpoints and networks are properly secured and monitored.
5. Collaborate with IT to secure user endpoints and identities, enforce MFA, and manage Microsoft Entra ID.
6. Ensure compliance with NIST CSF, NERC CIP, GDPR, and other relevant standards across all environments.
7. Produce incident reports, root‑cause analyses, and recommendations for stakeholders.
**Required Skills**
- Incident response, threat hunting, vulnerability assessment.
- Microsoft Sentinel configuration and SIEM rule creation.
- Microsoft Defender for Endpoint, Identity, and Cloud.
- Experience with CNAPP tools (e.g., Wiz, Prisma Cloud).
- Identity and Access Management (IAM) across Azure AD, AWS IAM, GCP IAM.
- Network segmentation, firewall rule management.
- Understanding of NIST CSF, NERC CIP, GDPR, ISO 27001, PCI‑DSS.
- Excellent problem‑solving, documentation, and communication abilities.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent professional experience).
- Certifications: Microsoft Certified: Azure Security Engineer Associate, Microsoft Security Operations Analyst, Security+; CISSP, GCIH, or GCIA are highly desirable.