X
Cybersecurity Engineer
Contract type
Ongoing
Work mode
Remote · Europe
Experience
Mid-level · 3+ years
Job description
Cybersecurity Engineer at XTEL responsible for strengthening security across the platform, applications, and Microsoft environment, with a focus on vulnerability management, secure SDLC, and SOC-driven remediation. The role sits in a growing Security & Compliance team and is hands-on, requiring collaboration with Engineering, Product, IT, Cloud Operations, and GRC.
At a glance
- Work mode
- Remote · Europe
- Languages
- English
What you'll do
- Own vulnerability management: intake, triage, risk-based prioritization, remediation tracking, validation, SLAs, and reporting across Azure environments (dev, test, prod, and customer-facing) and the development pipeline
- Partner with Engineering, Product, and QA to improve secure development practices: pipeline security and security gates in CI/CD; SAST, DAST, IAST, dependency/software composition (SCA), and code scanning; secure code review practices, threat modeling, and security requirements in design
- Work continuously with IT to secure infrastructure: identity and access management, endpoint protections, M365 controls, and configuration/hardening baselines
- Coordinate and drive triage and remediation for alerts, incidents, and vulnerabilities reported by XTEL's SOC, including root cause follow up
- Coordinate external penetration tests (scope, execution support, findings management, retesting and closure) and conduct internal testing
- Support patch management processes and verification in partnership with IT and Cloud Operations
- Partner with Cloud Operations on Azure security architecture, secure-by-design patterns, CSPM, secrets management, and network security
- Support security audits and continuous compliance (ISO 27001, SOC 1, SOC 2 Type 2, ISAE 3402), including evidence collection and control improvement
- Translate security findings into clear, actionable guidance for engineers and into evidence and inputs for the GRC function
- Proactively identify and act on opportunities to raise the security bar across the organization
What we're looking for
- 3+ years in cybersecurity engineering, security operations, DevSecOps, or security-focused IT (cloud-native SaaS experience strongly preferred, ideally on Azure)
- Proven track record running vulnerability management beyond scanning - prioritizing and driving remediation to closure across teams
- Working knowledge of AppSec and SDLC controls (CI/CD security, SAST/DAST/IAST/SCA, secure code review) and the ability to embed security without slowing delivery
- Hands-on experience securing Microsoft environments (Entra ID, Intune, Conditional Access, endpoint protections, M365 controls)
- Working knowledge of Azure security services and cloud security posture management
- Ability to work independently, set priorities, and build or mature programs in a lean environment with limited guidance
- Strong communicator who can drive work and build trust across Engineering, Product, Cloud Operations, IT, and Compliance
- English proficiency
- Proactive and self-starting - finds work that needs doing and does it without waiting to be told
- Pragmatic and risk-based - focuses effort where it reduces the most risk and balances security with delivery
- Collaborative - achieves outcomes through influence across teams they don't manage
Nice to have
- Familiarity operating within an ISO 27001 / SOC 2 environment and supporting audits
- Experience with infrastructure-as-code and securing CI/CD at scale
- Hands-on penetration testing or offensive security experience (e.g., OSCP)
- Experience with compliance automation tooling (e.g., Drata)
- Relevant certifications (e.g., GIAC, CISSP, AZ-500, SC-200, SC-300)
Your team
Security & Compliance team
A growing team that maintains a mature compliance foundation (ISO 27001:2022, SOC 2 Type 2, SOC 1 Type 2, ISAE 3402) and an established GRC function, alongside a managed SOC, an IT team, and a Cloud Operations team.
Benefits
- Remote or Hybrid working set-up
- Flexible working hours
- Competitive Salary Package and Bonus scheme
- A challenging role in a fast-growing AI-driven company
- A diverse and international team with strong ownership and a can-do mentality
- Opportunities to contribute meaningfully to the organization's growth and development
Apply
About XTEL
A leader in advanced, AI-driven solutions for consumer goods companies
XTEL combines cutting-edge technology, industry expertise, and data management to accelerate profitable revenue growth and value realization for consumer goods companies.
Key facts
- AI-driven solutions for consumer goods companies
- Maintains ISO 27001:2022, SOC 2 Type 2, SOC 1 Type 2, and ISAE 3402 compliance
- Has a managed SOC, an IT team, a Cloud Operations team, and an established GRC function
- Described as a fast-growing AI-driven company
What they value
- Diversity
- Ownership
- Can-do mentality