Security Officer performing patrols, emergency response, and customer service at Climax Molybdenum. Managing site security and assisting with emergency situations at various locations.
About the role
- IT Security Engineer designing and implementing cybersecurity measures for aerospace innovations at Destinus. Collaborating with IT engineering and Global Information Security Manager to ensure compliance with standards.
Responsibilities
- **What You´ll Do**
- **Security architecture and strategy**
- Develop and implement IT security policies, standards, and procedures, evolving IT and cloud environments toward cybersecurity best practices and zero-trust principles.
- Translate risk assessments, ISMS requirements, and regulatory obligations (ISO 27001, NIST, export control/defence standards) into technical controls.
- Contribute to cybersecurity roadmaps aligned with group strategy, including migration from a Google-centric to a Microsoft-based architecture.
- **Cloud and enterprise security engineering**
- Design and implement cybersecurity baselines for Microsoft 365, Entra ID, Intune, AWS, and on-prem Unix and Microsoft systems, integrated with existing environments.
- Define and maintain secure configurations for identity and access management, conditional access, logging, and monitoring across cloud and on-prem platforms.
- Collaborate with IT and engineering teams to harden Windows, macOS, and Linux endpoints using EDR, MDM, and configuration management tools.
- **Monitoring, detection, and incident response**
- Implement and tune SIEM/SOAR detections (e.g., Microsoft XDR or equivalent) covering key attack surfaces.
- Define logging, alerting, and runbooks for IT support and operations teams.
- Lead or support investigations of complex cybersecurity incidents, including root-cause analysis and remediation.
- Coordinate with the IT SOC team.
- **Security operations and projects**
- Own end-to-end delivery of major security initiatives, including scoping, solution design, implementation planning, and success metrics.
- Collaborate with IT on network segmentation, VPNs, and secure connectivity for offices, labs, and cloud workloads.
- Support vulnerability management and patching by providing prioritization and remediation guidance.
- Contribute to supplier and SaaS security assessments for tools used by Destinus.
- Deliver security awareness training and create user instructions.
- **Governance, collaboration, and awareness**
- Provide technical input to policies, standards, and procedures for IT, cloud, and endpoint security.
- Work with the Global Information Security Manager on ISO 27001, Part-IS, aviation/defence compliance, and customer audit support.
- Act as a cybersecurity subject-matter expert for engineering teams, promoting secure-by-design practices in software and hardware development beyond IT.
Requirements
- **What You’ll Need**
- Bachelor’s degree in computer science, information security, engineering, or equivalent practical experience
- At least 5 years of solid and hands‑on experience in IT security engineering, systems engineering, or cloud security in a corporate or high‑tech environment.
- Demonstrable track record of delivering relevant security projects with measurable impact (e.g. hardening M365/Azure, rolling out EDR/XDR etc., SIEM onboarding, zero‑trust initiatives).
- Certifications such as CISSP, CISM, CEH, or equivalent are a plus.
- Strong experience with Microsoft 365 / Entra ID / Intune and AWS security configuration (identity, access, conditional access, logging, compliance).
- Good knowledge of at least one major cloud platform beyond Azure (e.g. AWS) from a security and operations perspective.
- Solid understanding of networking (TCP/IP, routing, VPN, firewalls, DNS) and how to apply segmentation and connectivity securely.
- Experience with SIEM/SOAR tools and log management (e.g. Microsoft Sentinel, Splunk, or similar).Experience with endpoint security and management (EDR, MDM, configuration management) across Windows, macOS, and ideally also Linux.
- Ability to script/automate (PowerShell, Python, or similar) for policy deployment, hardening, and monitoring.
- Familiarity with information security management and risk handling - ISO/IEC 27001/27002, NIST CSF or SP 800‑53, and related controls.
- Experience working in or with regulated environments (aviation, defence, safety‑critical systems, or similar) is a strong plus.
- Understanding of secure software and infrastructure practices (least privilege, zero trust, secure configuration, change management).
Benefits
- **Why Join Us?**
- **✨ The Thrill of the Future – Work on cutting-edge projects that redefine aerospace.** ✨ Global Innovation Hub – Collaborate with top engineers from all over the world.** ✨ Fast-Paced & High-Growth – Experience the rush of working in a rapidly expanding company.** ✨ Real Impact – Your work won’t be theoretical—it will shape the future of flight.**
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Security Officer leading safety inspections and facility patrols at Crown Equipment Corporation. Assigning duties and responding to security incidents efficiently.
Security Officer overseeing safety inspections and personnel training for Crown Equipment Corporation. Responsible for monitoring facilities and responding to security incidents.
Manager of Security Risk at Grainger overseeing Information Security Risk team and managing security risk programs. Focused on regulatory compliance, leadership, and risk assessment integration.
SAP Security GRC Consultant involved in designing and implementing security architectures for Swiss clients. Collaborating with project teams on compliance and security solutions.
Senior Consultant with Wavestone providing SAP Security and IAM solutions in Switzerland. Collaborating on security architectures and supporting clients on SAP security transformations.
Network Security Engineer ensuring secure, highly available enterprise network systems with a focus on collaboration and technical excellence. Involves designing and implementing networking solutions.
Security Manager at Leonardo focusing on cyber compliance and risk management across OT and IT frameworks. Supporting clients in strategic initiatives and infrastructure assessments.
Senior Analyst leading cybersecurity governance initiatives at Elsevier. Developing and maturing governance programs for data protection and risk management across the organization.
Commercial Security Service Sales Executive promoting and selling security services at Johnson Controls. Building relationships and delivering solutions to protect people and property within assigned territories.