Security Engineer

VirtusLab is a leading European software consulting and engineering company focused on crafting clean code and practical solutions. The project involves shaping the future of a rapidly scaling UK insurance leader by supporting security operations within a modern Microsoft security stack and streamlining integration for a high-growth Managing General Agent (MGA) and brokerage ecosystem operating across multiple continents.

• 5+ years of experience in Cloud/SaaS Infrastructure Security consulting or engineering.
• Hands-on expertise with the Microsoft Security Stack including Entra ID, Microsoft Defender, Intune, Network Security, and Cloud Security.
• Proficiency in incident response, security analysis, and posture hardening.
• Experience securing and maintaining Microsoft Stack services.
• Formal background in Computer Science, STEM, or equivalent practical industry expertise.
• English communication skills at B2+ level or higher.
• Familiarity with security standards and compliance frameworks such as ISO 27001 and SOC-2 is advantageous.
• Experience with insurance infrastructure ecosystems is a plus.

• Deploy and optimize Microsoft Defender XDR, onboarding entities to Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps, integrating signals into Microsoft Sentinel as the SIEM/SOAR platform.
• Implement Zero Trust identity controls including phishing-resistant MFA, Privileged Identity Management (PIM), Conditional Access policies, and Active Directory security hardening across hybrid environments.
• Cooperate with external MDR providers to optimize security operations and incident response workflows.
• Develop, document, and monitor compliance with security baselines, configuration standards, and control frameworks across all group entities worldwide.
• Secure M365, Azure, and the SaaS ecosystem through Purview data classification, DLP policies, MDCA session controls, and continuous posture management.
• Execute a repeatable security onboarding framework for newly acquired entities during continuous business expansion (M&A security integration).