Information Security Engineer

The Information Security team is essential to safeguarding our software, services, and cloud environments. As the organisation’s delivery capacity grows, early security engagement and technical expertise have become critical to maintaining trust, compliance, and resilience.

Key Responsibilities

Identity & Access Management (IAM)
Review and enhance Entra Conditional Access policies.
Monitor privilege management usage and access reviews.
Lead investigation and proposal for multitenant Entra management.

Data Protection & Compliance
Expand and fine‑tune DLP policies across cloud platforms.
Monitor compliance indicators and identify gaps.

Cloud & Endpoint Security
Improve Defender for Cloud configurations.
Daily monitoring across Taegis, Microsoft Defender, Prisma, Tenable.
Reduce noise and strengthen detection workflows.

Control Assurance & Vulnerability Management
Validate security controls through internal audits.
Drive vulnerability investigations and coordinate remediation.

Advanced Security Operations
Support Blue Team and Purple Team exercises.
Organise and manage penetration testing.
Conduct threat modelling and maintain threat intel feeds.

Secure Development (Shift‑Left)
Embed security early in SDLC.
Perform secure code reviews and manage Snyk SCA/SAST.
Implement and manage Snyk DAST.

Network & Application Security
Review and optimise firewall rules.
Monitor Defender for Apps.
Recommend Azure Front Door and WAF best practices.

Integration, Optimisation & Continuous Improvement
Improve Taegis and Drata integrations.
Continuously harden systems and stay updated on threats.
Optimise detection, response, and compliance processes.

Company Culture
Munich Re Automation Solutions fosters a culture defined by forward‑thinking, continuous improvement, innovation, and dependable execution. The principle "Think Ahead, Deliver Today" guides how teams anticipate future needs while delivering quality solutions. Cultural pillars such as Better Together, Celebrate Success, Inspire Trust, Push Boundaries support collaboration, accountability, and customer‑centricity.

Required Skills & Experience
Strong knowledge of cloud security (Azure), IAM, Zero‑Trust.
Experience with SIEM/SOAR and vulnerability management.
Knowledge of SCA/SAST/DAST tools and secure coding.
Strong collaboration skills with engineering teams.
Analytical capability to interpret security signals.

Key Attributes
Proactive, solution‑oriented mindset.
Clear communication and trust‑building abilities.
Adaptable, curious, and motivated by securing cloud environments.