27 ott - Brindisi
Trigyn Technologies
Trigyn is seeking an experienced Cloud Security Expert for a 12-month contractual opportunity based onsite in Brindisi, Italy.
If you have expertise in Microsoft 365 security, threat detection, incident response, and cloud security operations, this could be your next opportunity!
Location: Brindisi, Italy (Onsite)
Contract: 12 Months
Job Description:
Duties The ICT Security Officer will perform, but not be limited to, the following duties in accordance with applicable ICT governance, standards, and security policies:
- Monitor, verify, and escalate security reports and alerts generated by designated ICT security systems and services.
- Monitor and respond to Microsoft 365 security incidents, including compromised accounts, suspicious e-mails, and other threats affecting the tenant.
- Conduct proactive threat-hunting activities using environment-specific capabilities, including M365 security tools and other relevant technologies, as appropriate.
- Establish, document, and maintain methods, procedures, and tools appropriate to the environment to support threat detection and response.
- Perform security incident response activities, including forensics analysis, and coordinate and advise on appropriate response measures for incidents detected by the team or reported/escalated to it from other sources.
- Monitor, share, and act on relevant threat intelligence, and coordinate the implementation of recommended measures where applicable to minimize exposure to associated risks.
- Perform regular security assessments of the ICT environment and systems throughout their life cycle (as appropriate) to identify potential security issues, provide guidance on effective remediation, and help minimize risk exposure.
- Issue security advisories and notifications to alert relevant operational teams to vulnerabilities affecting ICT systems, providing remediation recommendations including references to relevant security updates to effectively and promptly reduce exposure to associated risks.
- Verify vulnerabilities reported through various sources, notify relevant teams, provide appropriate recommendations for prompt remediation, and confirm the effectiveness of implemented corrective measures.
- Provide security-specific advice to operations teams to support system design, develop/ment, modification, and security configuration baselines in alignment with applicable architectural standards and security policies.
- Prepare and issue end-user awareness materials and support awareness initiatives to strengthen users' ability to recognize and respond appropriately to security threats.
- Prepare reports and provide regular updates on security-related issues, including incidents, in accordance with the established governance and reporting framework.
- Identify Operational Resilience (OR) controls for implementation and maintenance by the relevant operations teams across the covered ICT environment and systems, commensurate with business requirements, and perform OR assessments to verify correct implementation.
- Support Disaster Recovery Exercises (DRX) performed by the respective operations teams and coordinate the implementation of disaster recovery plans.
- Participate in the duty officer modality outside defined working hours, under specifically defined conditions, to support and respond to urgent security-specific needs, including incident response.
Experience & Certification
- Minimum 7–10 years of progressively responsible experience in ICT security roles,
of which at least 3 years in cloud security operations for Microsoft 365 / Azure environments in enterprise or mission-critical settings.
- Demonstrated expert-level experience in security monitoring, incident response, and digital forensics, including response to compromised accounts, phishing/BEC, and other cloud borne threats.
- Proven hands-on experience with the Microsoft Defender XDR suite, Microsoft Entra ID security capabilities, and Microsoft Sentinel or equivalent SIEM/SOAR platforms, including advanced hunting (KQL).
- Demonstrated experience in threat intelligence handling, vulnerability management, and security assessments across the system life cycle.
- Demonstrated ability to develop methods, procedures, guidelines, standards, or policies with organization-wide impact, consistent with the Expert Support level.
- Experience supporting operational resilience, disaster recovery planning, and disaster recovery exercises is highly desirable.
Required / Desirable Certifications:
- Microsoft Certified: Security Operations Analyst Associate (SC-200) or equivalent — Required.
- CISSP, CISM, GIAC (e.g., GCIH, GCFA), or equivalent recognized security certification — Required (at least one).
- Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Azure Security Engineer Associate (AZ-500) — Desirable.
- CompTIA Security+ / CySA+ — An asset.
- ITIL Foundation — Desirable. VI. Language
- Fluency in English, both written and oral, is required.
Service Scope
- Cloud & Collaboration Environment
- Security Monitoring & Response Systems
- Resilience & Recovery
- Microsoft 365 & Cloud Security
- Security Operations & Incident Response
- Vulnerability & Risk Management
TRIGYN TECHNOLOGIES is a multinational IT services company with resources deployed in 28 countries. TRIGYN is an ISO 9001:2015, ISO 27001:2022 (ISMS) and CMMI Level 5 certified company. TRIGYN has offices in the United States, Canada, Switzerland and India.
Job Type: Contract
Pay: Up to €175.00 per day
Work Location: In person
27 ott - Nettuno
Gruppo importante
27 ott - Pieve di Cadore
Azienda Leader
27 ott - Racale
Azienda importante
27 ott - Roma
Azienda riconosciuta