{"id":4305383,"url":"https://alion.io/job/retalgroup-cyber-security-engineer-group-level","title":"Cyber Security Engineer (Group level)","company":{"id":453430,"name":"Retalgroup","domain":"retalgroup.com","url":"https://alion.io/company/retalgroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Vilnius, Lithuania"],"countries":["LT"],"hiring_countries":["LT"],"hiring_countries_total":1,"salary":{"min":3637,"max":4463,"currency":"EUR","period":"month","gross":true,"usd_annual":59076},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-11-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":9,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":9},"description":"Role profile:\n\n We are looking for a hands-on Cyber Security Engineer to own endpoint hardening, identity & access security, and vulnerability management across our Windows environment. You'll be the technical owner of our security tooling stack — designing controls, automating remediation, and continuously reducing our attack surface. You'll work closely with our outsourced SOC partners on monitoring and incident response, and partner with the Cyber Security Manager and the Core Infrastructure team to keep security and infrastructure moving in the same direction.\n\nThis position is subordinate to RETAL Group Cyber Security Manager. \n\nKEY responsibilities:\n\nAdminister and continuously improve core security tooling — Cortex XDR (EDR), the internal SIEM stack.\n\nOwn Microsoft Intune as the primary platform for device and application lifecycle management — deployment, compliance policies, and remediation scripting.\n\nMonitor security alerts and events, triage incidents, and coordinate response for critical (\"red flag\") scenarios.\n\nInvestigate incidents by analyzing logs, identify root causes, and drive permanent fixes.\n\nDesign, implement, and maintain Windows Defender Application Control (WDAC) policies and other endpoint-hardening measures across the device fleet.\n\nManage identity and access security in Microsoft Entra ID / Active Directory: Conditional Access, MFA, LAPS, privileged access management (PAM), and least-privilege enforcement.\n\nAutomate recurring security and remediation processes using PowerShell.\n\nParticipate in designing penetration testing and phishing-simulation scenarios.\n\nSupport internal and external security audits\n\n Qualifications:\n\n Higher education in IT, Information Security, or a related field, with 3+ years of IT security administration/engineering experience.\n\nStrong hands-on experience with Microsoft Intune, Entra ID/Active Directory, Conditional Access, and MFA.\n\nExperience with vulnerability management, patching processes, and endpoint/application security controls (e.g., WDAC).\n\nWorking knowledge of PowerShell scripting and security platforms such as EDR/XDR or SIEM solutions.\n\nGood understanding of identity and access management principles, including least privilege and PAM.\n\nFluent English (C1); analytical, self-driven mindset with the ability to work independently.\n\n Nice to have:\n\n Experience with IT asset management/discovery tools (Lansweeper or similar).\n\nBasic understanding of network security principles (firewalls, VPN access policy) — deep network engineering (switches/routers) is not required for this role.\n\nRelevant certifications: Microsoft SC-300 / SC-400 / AZ-500, CompTIA Security+, or similar.\n\nExposure to OT/IoT environment security.\n\n We offer:\n\n Dynamic work in international company successfully working in multiple countries;\n\nPersonal growth and development;\n\nCompetitive salary and benefits for employees’ package;\n\nBecoming part of IT projects implementation in multiple regions IT infrastructure;\n\nKey participation in IT architecture and infrastructure upgrade changes;\n\nOther benefits and bonuses in accordance with internal policies in force (additional health insurance, travel insurance for you and your family on your vacation travels, additional incidents insurance 24/7, etc.);\n\nThe possibility of flexibly combining work in the office with remote work;\n\nThe possibility of free access to a sports area in the office building;\n\nFree parking in a lot near the office, bicycle storage in the office building.\n\nOur office is located in Narbuto g. 5, Vilnius.\n\nMonthly salary is discussed during the interview. The final level of the salary will depend on competences displayed and results achieved. The salary may be further negotiable for candidates of outstanding competence and qualification.\n\nWe inform you that the personal data you have provided will be processed for the purposes of personnel selection, based on your consent expressed by submitting this data, and will be stored until the end of this selection process. Please note that, in order to evaluate your candidacy, we may contact your specified former employers for recommendations and inquire about your qualifications, professional skills, and personal attributes. Once a candidate is selected for the sought position, your data, along with the data of other applicants, will be destroyed\n\n Atlyginimas\n\n 3637-4463\n €/mėn.\n neatskaičius mokesčių\n\n Darbo vieta\n\n Narbuto 5, T. Narbuto gatvė, Vilnius, Vilniaus m. sav. Apskaičiuokite kelionės laiką iki darbo","description_format":"text","description_chars":4532,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Lithuania","iso":"LT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Plastics & Polymers","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-14T07:01:44Z"}],"visa":[],"liveness":{"score":82,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.816,"p_room":1,"age_days":9,"expected_fill_days":28,"reasons":["seen:9","win:early"],"computed_at":"2026-11-14T15:24:36Z"},"pay":{"stated_usd_annual":59076,"is_top_pay":false},"html_url":"https://alion.io/job/retalgroup-cyber-security-engineer-group-level","json_url":"https://alion.io/job/retalgroup-cyber-security-engineer-group-level.json","meta":{"generated_at":"2026-11-14T15:24:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16949,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":453430},"rest":"https://alion.io/mcp/rest/get_company?id=453430"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fretalgroup-cyber-security-engineer-group-level"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fretalgroup-cyber-security-engineer-group-level"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fretalgroup-cyber-security-engineer-group-level"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/retalgroup-cyber-security-engineer-group-level\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fretalgroup-cyber-security-engineer-group-level"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4305383}},{"tool":"search_jobs","arguments":{"company":"retalgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4305383},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}