{"id":3089263,"url":"https://alion.io/job/unit4-information-protection-security-operations-engineer-2","title":"Information Protection & Security Operations Engineer","company":{"id":1916,"name":"Unit4","domain":"unit4.com","url":"https://alion.io/company/unit4","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lisbon, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":42778,"max":50477,"currency":"EUR","period":"year","gross":null,"usd_annual":56661},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Nessus","optional":false},{"name":"OneDrive","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"Snort","optional":false},{"name":"SOC 2","optional":false},{"name":"Suricata","optional":false}],"status":"live","first_seen_at":"2026-10-22T11:43:21Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T22:11:28Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Meet Unit4. With over 40 years of heritage, we’re an agile, fast growing, Cloud company that is on a mission to redefine Enterprise Resource Planning (ERP) for mid-market people-centric organisations.\nWith our innovative, self-driving, adaptive and intuitive software, our customers can spend more time on meaningful high-value work.\nAt the heart of what we do lies a simple yet profound purpose: Improve how people work by focusing on what truly matters. - A powerful statement that enables different priorities for different people.\nWe’re shaping how work should feel, and we empower our people by providing them with the right tools to achieve the autonomy they need - it's what makes us unique.\n The Information Protection & Security Operations Enginee r is a hybrid role split roughly 50/50 between two disciplines. Half of your time is spent on information protection: managing and improving Microsoft Purview controls such as Data Loss Prevention (DLP), Insider Risk Management and related data protection policies, so that our customers' and our own sensitive data is protected without getting in the way of how people work. The other half is spent in Security Operations: deploying, configuring, monitoring and maintaining our security solutions, responding to incidents and ensuring vulnerabilities are identified and addressed. You will work closely with our IT colleagues to ensure that security and data protection are integrated into all aspects of the organization's infrastructure and act as guardians of the IT estate and of our data.\nThe responsibilities of the Information Protection & Security Operations Engineer include:\nInformation Protection (approx. 50%)\nMaintaining, Designing, deploying and tuning Microsoft Purview Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, Teams, endpoints and cloud apps \nConfiguring and operating Insider Risk Management, including policy templates, indicators, Adaptive Protection and case triage, in close collaboration with HR, Legal and Compliance \nImplementing and maintaining information classification, including sensitivity labels, label policies, auto-labeling and encryption \nManaging related protection policies such as retention and records management, communication compliance and Defender for Cloud Apps session and access policies \nMonitoring DLP and Insider Risk alerts, investigating policy matches, reducing false positives and reporting on policy effectiveness and data protection posture \nDefining and documenting information protection standards, processes and runbooks, and supporting audits and compliance requirements (e.g. ISO 27001, SOC 2, GDPR, NIS2) \nDriving user awareness and adoption, including policy tips, guidance and training for business teams \nSecurity Operations (approx. 50%)\nDeploying and configuring security solutions such as intrusion detection systems, and endpoint protection \nMonitoring security systems to identify and respond to security incidents, including triage of alerts in Microsoft Defender XDR and Microsoft Sentinel\nInvestigating security incidents and developing remediation plans \nConducting vulnerability assessments and coordinating remediation of findings with infrastructure and application teams \nDeveloping and implementing security policies and procedures \nBuilding and improving detection rules, automation and playbooks to reduce response times \nProviding technical guidance and support to other IT professionals \n The skills required for an Information Protection & Security Operations Engineer include:\nInformation Protection\nHands-on experience implementing and operating Microsoft Purview DLP and Insider Risk Management in a production environment \nPractical knowledge of sensitivity labels, information classification, encryption and retention concepts \nUnderstanding of data protection and privacy regulations and frameworks (e.g. GDPR, ISO 27001, NIS2) and how they translate into technical controls \nAbility to balance security requirements with user productivity and to work sensitively with HR, Legal and Compliance on insider risk topics \nSecurity Operations\nKnowledge of security technologies such as firewalls, intrusion detection systems, and endpoint protection \nFamiliarity with networking and operating systems \nUnderstanding of security principles and best practices \nExperience with SIEM and XDR tooling, including KQL queries for investigation and detection \nAbility to work under pressure and respond to security incidents quickly \nStay informed about current CVEs and emerging threats, with the ability to track, assess, and ensure coverage to safeguard the organization's security posture \nGeneral\nAnalytical and problem-solving skills \nEffective communication and collaboration skills, with the ability to explain data protection and security topics to non-technical stakeholders \nDiscretion and sound judgement when handling confidential and sensitive information \nEducational Backgrounds\nA bachelor's degree in computer science, information technology, information security or a related field is typically required for an Information Protection & Security Operations Engineer. Relevant certifications such as Microsoft SC-401 (Information Security Administrator), SC-200 (Security Operations Analyst), AZ-500, CompTIA Security+ or CISSP may also be beneficial.\nInformation Protection & Security Operations Engineers may use a variety of tools and software, including:\nMicrosoft Purview: Data Loss Prevention, Insider Risk Management, Information Protection (sensitivity labels), Data Lifecycle Management, Communication Compliance, Audit and eDiscovery \nMicrosoft Defender XDR (Defender for Endpoint, Office 365, Identity and Cloud Apps) \nSecurity information and event management (SIEM) systems such as Microsoft Sentinel \nMicrosoft Intune and Entra ID for endpoint and identity-based enforcement \nFirewalls such as Cisco ASA, Barracuda NGFW/WAF, Azure Firewall \nIntrusion detection and prevention systems such as Snort or Suricata \nVulnerability scanners such as Nessus or Qualys \n Who we are\nWe are a people-first community that nurtures all the areas that surround your working experience. With us, you’ll be surrounded by a high-performance team that supports your authentic self and celebrates your uniqueness.\nWe believe that ‘How work should feel’ is an evolving statement. Work goes beyond tasks and everyday responsibilities it’s about feeling valued, empowered, promoted, impactful, seen, and appreciated.\nWe are reimagining how work makes people feel.\nWhat we offer\na culture built on trust and accountability - giving you the freedom and autonomy to be successful and make an impact \nbalance - with our Flexible Leave Paid Time Off policy, remote working opportunities, Global Wellbeing Days, and other great benefits \ngrowth opportunities - we provide the tools and guidance required so that you can focus on what really matters to you and so, ultimately, you can achieve your best work \ntalented colleagues, role models and mentors - work, learn and be inspired by some of the best talent in the software industry \na commitment to sustainability - with initiatives such as our Environmental, Social, and Governance strategy and Act4Good programme \na safe and inclusive working environment - supported by our Employee Resource Groups, which are open to all. \nOur commitment to equity\nUnit4 is committed to ensuring equal opportunity for everyone. We make our hiring decisions solely based on skills, qualifications, and our current business needs. We know that diversity brings fresh perspectives, ideas, and solutions to our company. This is the essence of our culture. We also welcome and encourage people who are pregnant and/or parents-to-be to apply. If you would like to know more about our commitment to diversity, visit our blogs:\nOur focus to DEI remains central to who we are \nInclusive hiring at Unit4: Building equal opportunities for all \nBackground check :\nThis role may require security clearance required for customer projects and access to sensitive (customer) data. That means that after you have accepted our offer, we could ask for background checks. Subject to applicable local laws, such security checks may require disclosure of personal information including criminal record declaration, right to work, personal identification and work history. No worries - we'll handle it according to local privacy laws and keep your information safe. Questions? Feel free to reach out!","description_format":"text","description_chars":8485,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Equity"],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["ERP & Business Management Software"],"lifecycle":[{"event":"open","at":"2026-10-22T14:24:19Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":56661,"is_top_pay":false},"html_url":"https://alion.io/job/unit4-information-protection-security-operations-engineer-2","json_url":"https://alion.io/job/unit4-information-protection-security-operations-engineer-2.json","meta":{"generated_at":"2026-10-24T01:38:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2694,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1916},"rest":"https://alion.io/mcp/rest/get_company?id=1916"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Funit4-information-protection-security-operations-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Funit4-information-protection-security-operations-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Funit4-information-protection-security-operations-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/unit4-information-protection-security-operations-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Funit4-information-protection-security-operations-engineer-2"}]}