Security Engineer

In this role you join our client, a technology consulting and cybersecurity services firm, to protect client environments, improve security operations, and reduce risk. Based in Greece, you can work remotely within the region and collaborate with client teams across industries.

You will be a hands-on security engineer, acting as a technical lead, mentor, and collaborator within a growing Security Operations team.

What you'll do

• Security Monitoring & Incident Response: investigate and respond to alerts across endpoints, identity, cloud and email, lead containment, remediation, and recovery efforts.
• Threat hunting, root-cause analysis, and creating actionable recommendations.
• Analyze phishing, account compromise, malware, ransomware, and unauthorized access attempts; produce detailed incident reports for technical teams and stakeholders; coordinate with clients, vendors, and internal teams.
• Vulnerability Management & Risk Reduction: prioritise remediation, validate fixes, and work with infrastructure, cloud, and endpoint teams to reduce risk.
• Security Platform Administration: administer and optimise security technologies such as Field Effect, Microsoft Defender, Microsoft Sentinel, SentinelOne, Cisco Umbrella, PII Protect, and more; tune rules and alerts; maintain playbooks and response workflows.
• Leadership & Mentorship: act as escalation point for analysts; guide investigations; mentor junior staff; conduct knowledge-sharing sessions and post-incident reviews.
• Process Improvement: identify automation opportunities, improve workflows, maintain standard operating procedures, and track security metrics.

Requirements

• 5+ years in cybersecurity, SOC, or security operations.
• 3+ years investigating and responding to security incidents.
• Strong knowledge of incident response, threat detection, security monitoring, vulnerability management, endpoint security, identity security, and email security; Microsoft 365 security experience.
• Experience with SIEM, EDR, and XDR technologies; Windows operating systems in enterprise environments.
• Ability to develop detection logic, use cases, playbooks, or security automation; strong communication to non-technical stakeholders; proven mentoring ability.

Preferred & Certifications

• Experience in MSSP/MSP environments and supporting multiple client environments.
• Microsoft Defender XDR, Microsoft Sentinel, Entra ID, Intune; automation with PowerShell, Python, Logic Apps, or similar.
• Familiarity with SOC 2, NIST, CIS Controls, HIPAA, ISO 27001; certifications such as SC-200, SC-300, AZ-500, Security+, CySA+, CISSP, GCIH, GCIA.

What success looks like

• Lead complex investigations and improve detection; reduce false positives.
• Be a trusted technical resource for junior analysts; drive improvements and communicate risk clearly.
• Contribute to a culture of continuous learning and operational excellence.

Why join us

• Work with modern cybersecurity technologies and platforms.
• Expose yourself to diverse client environments and industries.
• Help shape and mature growing security operations programmes; mentor others and make a direct impact.

If you are passionate about cybersecurity and ready to lead and develop a high-performing security operations team, we’d love to hear from you.

For enquiries, contact our client’s Talent Acquisition Partner at

georgia@VanKaizen.com