Senior IT Security Engineer (ID2140)

ppSelect how often (in days) to receive an alert: /p pThe AO is a medically guided, not-for-profit organization, a global network of surgeons, and the world's leading education, innovation, and research organization specializing in the surgical treatment of trauma and musculoskeletal disorders. We are home to people from all over the world, from different backgrounds, with diverse talents and specialist areas. What binds us together is our passion for excellence, our dedication to our mission of improving patient care, and our understanding that we are stronger together: we are one AO.br/For more information, visit: /p pAs part of the AO’s support units, our IT department offers information technology services to maintain and oversee computer infrastructure across the AO Foundation. /p pWorkload percentage / Pensum: 100% /p h3bShort Description /b /h3 pWe are seeking a Security Engineer to lead the automation of SOC Level 1 and Level 2 processes and support advanced incident response. This role is critical to future security operations. The engineer will design, implement, and maintain automated runbooks using Microsoft’s security technologies and AI capabilities, ensuring scalable and efficient security operations. /p h3bMain Responsibilities /b /h3 ul liDevelop and maintain automated SOC Level 1 and Level 2 runbooks and playbooks using Logic Apps, Power Automate, and AI Foundry components /li liEngineer detection rules, workbooks, and playbooks in Microsoft Sentinel/Microsoft XDR platforms /li liIntegrate and optimize Microsoft Defender for Endpoint, Identity, Cloud, and Office 365 within the XDR framework /li liApply AI-driven threat detection and response using Microsoft Copilot for Security and related tools /li liCollaborate with internal teams and external partners to embed security into CI/CD pipelines and IT delivery models /li liProvide SOC Level 3 support for complex incidents, including forensic analysis and threat containment /li liContribute to the DevSecOps organization /li liSupport the implementation of an ISO 27000-aligned ISMS and assist with governance and compliance efforts /li /ul h3bMain Requirements /b /h3 ul liBachelor’s degree in Information Technology, Computer Science, or related field /li li5 years of professional experience in relevant field /li liMinimum 2 years of hands-on experience with SOC Level 1 and Level 2 operations and Level 3 incident response /li liProgramming skills in Python or Powershell /li liDeep familiarity with Microsoft security products, including Microsoft Sentinel, Defender XDR components and KQL /li liStrong understanding of Azure infrastructure, identity, and security architecture /li liUnderstanding of security baselining, network hardening, and zero trust principles /li liAbility to work in cross-functional DevSecOps environment /li liFluency in English. Fluency in German or any other languages will be considered as an added value /li /ul pPreferred Qualifications: /p ul liMicrosoft certifications in security technologies (e.g., SC-200, SC-300) /li liExperience with agentic AI standards and responsible AI practices /li liFamiliarity with governance models and risk assessment frameworks /li liUnderstanding of structured threat intelligence and enrichment workflows /li liFamiliarity with MITRE ATTCK mapping and detection coverage assessments /li liFamiliarity with detection-as-code pipelines and version control systems /li liFamiliarity with Web Application Firewall (WAF) principles and rule tuning /li /ul pbWe offer /b /p ul liAn interesting and varied job in an exciting and innovative organization /li liThe opportunity to be part of a highly committed international team /li liModern infrastructure /li liHigh degree of flexibility regarding working hours and location (depending on operational requirements) /li liGenerous package of social benefits, including supplementary vacation days and pension scheme contributions /li liInternal skills training opportunities and support for continued education /li /ul /p #J-18808-Ljbffr