Cyber Security Engineer (Group level)

Role profile:

We are looking for a hands-on Cyber Security Engineer to own endpoint hardening, identity & access security, and vulnerability management across our Windows environment. You'll be the technical owner of our security tooling stack — designing controls, automating remediation, and continuously reducing our attack surface. You'll work closely with our outsourced SOC partners on monitoring and incident response, and partner with the Cyber Security Manager and the Core Infrastructure team to keep security and infrastructure moving in the same direction.
This position is subordinate to RETAL Group Cyber Security Manager.

KEY responsibilities:

• Administer and continuously improve core security tooling — Cortex XDR (EDR), the internal SIEM stack.
  
• Own Microsoft Intune as the primary platform for device and application lifecycle management — deployment, compliance policies, and remediation scripting.
  
• Monitor security alerts and events, triage incidents, and coordinate response for critical ("red flag") scenarios.
  
• Investigate incidents by analyzing logs, identify root causes, and drive permanent fixes.
  
• Design, implement, and maintain Windows Defender Application Control (WDAC) policies and other endpoint-hardening measures across the device fleet.
  
• Manage identity and access security in Microsoft Entra ID / Active Directory: Conditional Access, MFA, LAPS, privileged access management (PAM), and least-privilege enforcement.
  
• Automate recurring security and remediation processes using PowerShell.
  
• Participate in designing penetration testing and phishing-simulation scenarios.
  
• Support internal and external security audits

Qualifications:

• Higher education in IT, Information Security, or a related field, with 3+ years of IT security administration/engineering experience.
  
• Strong hands-on experience with Microsoft Intune, Entra ID/Active Directory, Conditional Access, and MFA.
  
• Experience with vulnerability management, patching processes, and endpoint/application security controls (e.g., WDAC).
  
• Working knowledge of PowerShell scripting and security platforms such as EDR/XDR or SIEM solutions.
  
• Good understanding of identity and access management principles, including least privilege and PAM.
  
• Fluent English (C1); analytical, self-driven mindset with the ability to work independently.

Nice to have:

• Experience with IT asset management/discovery tools (Lansweeper or similar).
  
• Basic understanding of network security principles (firewalls, VPN access policy) — deep network engineering (switches/routers) is not required for this role.
  
• Relevant certifications: Microsoft SC-300 / SC-400 / AZ-500, CompTIA Security+, or similar.
  
• Exposure to OT/IoT environment security.

We offer:

• Dynamic work in international company successfully working in multiple countries;
  
• Personal growth and development;
  
• Competitive salary and benefits for employees’ package;
  
• Becoming part of IT projects implementation in multiple regions IT infrastructure;
  
• Key participation in IT architecture and infrastructure upgrade changes;
  
• Other benefits and bonuses in accordance with internal policies in force (additional health insurance, travel insurance for you and your family on your vacation travels, additional incidents insurance 24/7, etc.);
  
• The possibility of flexibly combining work in the office with remote work;
  
• The possibility of free access to a sports area in the office building;
  
• Free parking in a lot near the office, bicycle storage in the office building.
  

Our office is located in Narbuto g. 5, Vilnius.

Monthly salary is discussed during the interview. The final level of the salary will depend on competences displayed and results achieved. The salary may be further negotiable for candidates of outstanding competence and qualification.

We inform you that the personal data you have provided will be processed for the purposes of personnel selection, based on your consent expressed by submitting this data, and will be stored until the end of this selection process. Please note that, in order to evaluate your candidacy, we may contact your specified former employers for recommendations and inquire about your qualifications, professional skills, and personal attributes. Once a candidate is selected for the sought position, your data, along with the data of other applicants, will be destroyed

Atlyginimas

3637-4463 €/mėn. neatskaičius mokesčių

Darbo vieta

Narbuto 5, T. Narbuto gatvė, Vilnius, Vilniaus m. sav. Apskaičiuokite kelionės laiką iki darbo