Hybrid IT Security Engineer

at Destinus

• Job title: IT Security Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Cyber Security, DNS, Firewalls, Linux, MacOS, Python, Splunk, TCP/IP, Unix
• Location requirements: Hybrid, Madrid, Spain

About the role

• IT Security Engineer designing and implementing cybersecurity measures for aerospace innovations at Destinus. Collaborating with IT engineering and Global Information Security Manager to ensure compliance with standards.

Responsibilities

• **What You´ll Do**
• **Security architecture and strategy**
• Develop and implement IT security policies, standards, and procedures, evolving IT and cloud environments toward cybersecurity best practices and zero-trust principles.
• Translate risk assessments, ISMS requirements, and regulatory obligations (ISO 27001, NIST, export control/defence standards) into technical controls.
• Contribute to cybersecurity roadmaps aligned with group strategy, including migration from a Google-centric to a Microsoft-based architecture.
• **Cloud and enterprise security engineering**
• Design and implement cybersecurity baselines for Microsoft 365, Entra ID, Intune, AWS, and on-prem Unix and Microsoft systems, integrated with existing environments.
• Define and maintain secure configurations for identity and access management, conditional access, logging, and monitoring across cloud and on-prem platforms.
• Collaborate with IT and engineering teams to harden Windows, macOS, and Linux endpoints using EDR, MDM, and configuration management tools.
• **Monitoring, detection, and incident response**
• Implement and tune SIEM/SOAR detections (e.g., Microsoft XDR or equivalent) covering key attack surfaces.
• Define logging, alerting, and runbooks for IT support and operations teams.
• Lead or support investigations of complex cybersecurity incidents, including root-cause analysis and remediation.
• Coordinate with the IT SOC team.
• **Security operations and projects**
• Own end-to-end delivery of major security initiatives, including scoping, solution design, implementation planning, and success metrics.
• Collaborate with IT on network segmentation, VPNs, and secure connectivity for offices, labs, and cloud workloads.
• Support vulnerability management and patching by providing prioritization and remediation guidance.
• Contribute to supplier and SaaS security assessments for tools used by Destinus.
• Deliver security awareness training and create user instructions.
• **Governance, collaboration, and awareness**
• Provide technical input to policies, standards, and procedures for IT, cloud, and endpoint security.
• Work with the Global Information Security Manager on ISO 27001, Part-IS, aviation/defence compliance, and customer audit support.
• Act as a cybersecurity subject-matter expert for engineering teams, promoting secure-by-design practices in software and hardware development beyond IT.

Requirements

• **What You’ll Need**
• Bachelor’s degree in computer science, information security, engineering, or equivalent practical experience
• At least 5 years of solid and hands‑on experience in IT security engineering, systems engineering, or cloud security in a corporate or high‑tech environment.
• Demonstrable track record of delivering relevant security projects with measurable impact (e.g. hardening M365/Azure, rolling out EDR/XDR etc., SIEM onboarding, zero‑trust initiatives).
• Certifications such as CISSP, CISM, CEH, or equivalent are a plus.
• Strong experience with Microsoft 365 / Entra ID / Intune and AWS security configuration (identity, access, conditional access, logging, compliance).
• Good knowledge of at least one major cloud platform beyond Azure (e.g. AWS) from a security and operations perspective.
• Solid understanding of networking (TCP/IP, routing, VPN, firewalls, DNS) and how to apply segmentation and connectivity securely.
• Experience with SIEM/SOAR tools and log management (e.g. Microsoft Sentinel, Splunk, or similar).Experience with endpoint security and management (EDR, MDM, configuration management) across Windows, macOS, and ideally also Linux.
• Ability to script/automate (PowerShell, Python, or similar) for policy deployment, hardening, and monitoring.
• Familiarity with information security management and risk handling - ISO/IEC 27001/27002, NIST CSF or SP 800‑53, and related controls.
• Experience working in or with regulated environments (aviation, defence, safety‑critical systems, or similar) is a strong plus.
• Understanding of secure software and infrastructure practices (least privilege, zero trust, secure configuration, change management).

Benefits

• **Why Join Us?**
• **✨ The Thrill of the Future – Work on cutting-edge projects that redefine aerospace.** ✨ Global Innovation Hub – Collaborate with top engineers from all over the world.** ✨ Fast-Paced & High-Growth – Experience the rush of working in a rapidly expanding company.** ✨ Real Impact – Your work won’t be theoretical—it will shape the future of flight.**