Information Security Engineer

Dentons is a global law firm with over 10,000 lawyers, operating as a "polycentric" international law firm without a dominant national culture or headquarters. The firm leverages diverse backgrounds and legal traditions, including Civil Law, English Common Law, and US Common Law. Dentons is committed to diversity, inclusion, and providing a flexible and supportive work environment.

• Minimum 3 years of experience in cloud security or enterprise cybersecurity engineering.
• Advanced expertise in Microsoft Azure security, including at least two of: Defender for Cloud, Microsoft Sentinel, Infrastructure/Network Security (IaaS), Application and API security, Storage and database security.
• Advanced expertise in Microsoft 365 security, including at least two of: Microsoft Entra ID, identity and access management, Microsoft Purview, data protection and compliance, Microsoft 365 Defender suite, Intune/Endpoint Manager.
• Strong understanding of security architecture principles such as Zero Trust, defense-in-depth, and least privilege.
• Knowledge of hybrid cloud environments and system integrations.
• Experience with vulnerability management, including penetration testing analysis and remediation coordination.
• Understanding of API security and modern integration technologies.
• Scripting and automation skills, e.g., PowerShell, Python, or Bash.
• Desire to deepen exposure and grow toward security architectural responsibilities.

Professional experience:

• Proven experience designing and implementing secure solutions in Microsoft technology-based enterprise environments.
• Experience working with large-scale or multi-country IT environments.
• Exposure to security operations, incident response, and security tooling.
• Experience collaborating across infrastructure, development, and business teams.

• Design, implement, and maintain security and compliance controls across Microsoft 365, Microsoft Azure, and hybrid environments.
• Act as a cybersecurity subject-matter expert for European and Country IT teams providing practical guidance on secure design and implementation.
• Embed security into application, infrastructure, identity, endpoint, and integration architectures, ensuring alignment with secure development lifecycle and architectural standards.
• Collaborate with architects, engineers, project teams, and business stakeholders to define security requirements for enterprise initiatives.
• Support SOC and CSIRT teams with incident response activities including investigation, containment, and remediation.
• Lead vulnerability management activities including scanning, assessments, penetration testing coordination, and remediation tracking.
• Identify, assess, and mitigate security risks across cloud and enterprise environments.
• Provide advanced troubleshooting and technical leadership for complex security issues.
• Develop and maintain security documentation, standards, reports, and control frameworks.