Security Engineer at Optiver

on-site · full-time · Visa sponsorship

Apply for this role at Optiver

Responsibilities:
- Monitor security operations: investigate alerts, identify threats, and respond to incidents across cloud (AWS, M365) and on-prem environments.
- Maintain and tune security tooling: SIEM, EDR, network sensors, cloud-native protections and endpoint solutions.
- Harden cloud and identity: implement Conditional Access, MFA, PIM, Defender suites, tenant hardening and identity protections in Entra ID.
- Implement data protection: configure Microsoft Purview, sensitivity labels, DLP, and insider risk policies.
- Automate security workflows: build detection and response playbooks, scripts and tools using Python and PowerShell; integrate via APIs (Graph, REST).
- Lead incident response activities: investigation, containment, remediation, and post-incident reviews using logs, IOCs and threat intelligence.
- Perform risk assessments and vulnerability reviews; propose and track practical mitigations.
- Collaborate and enable teams: advise engineering and business groups on secure architecture, access controls and secure development practices.

Requirements:
- Practical experience in security engineering across cloud (AWS) and Microsoft 365 environments.
- Familiarity with identity security practices (Entra ID, Conditional Access, MFA, PIM) and Defender products.
- Hands-on scripting and automation skills in Python and PowerShell; experience integrating via APIs.
- Experience with SIEM, EDR and log analysis for detection and investigation.
- Knowledge of vulnerability assessment, incident response processes and security controls validation.
- Strong communication skills and ability to work with cross-functional teams to embed security best practices.