{"id":2123624,"url":"https://alion.io/job/virtuslab-security-engineer","title":"Security Engineer","company":{"id":1440,"name":"VirtusLab","domain":"virtuslab.com","url":"https://alion.io/company/virtuslab","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kielce, Poland","Kraków, Poland","Wrocław, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":98000,"period":"year","method":"role_country_seniority_unknown","sample_n":137},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-07T13:00:17Z","employer_posted_date":null,"last_verified_at":"2026-10-07T13:00:17Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"VirtusLab is a leading European software consulting and engineering company. Our mission is to craft clean code and practical solutions with precision and purpose. We foster a dynamic culture rooted in strong engineering, a sense of ownership, and transparency, empowering professionals to make a substantial impact in the software industry.\nAbout the Engagement\nShape the future of a rapidly scaling UK insurance leader. The scope of cooperation encompasses supporting security operations within a modern security stack and streamlining integration capabilities to unify a high-growth MGA and brokerage ecosystem. Core deliverables include contributing to incident response operations, managing AV/EDR mechanisms, developing and updating security policy frameworks, optimizing SIEM operations, and driving IAM hardening initiative.\n\nProject\nEnterprise Security E2E\nProject Scope\nEstablishing a modern, enterprise-grade security function for one of the UK’s fastest-growing Managing General Agents and brokerage groups. The end-client operates across three continents with entities spanning the UK, Europe, and Asia-Pacific, expanding dynamically through M&A operations.\nThe scope focuses on hardening a complex hybrid Microsoft environment, unifying fragmented security tooling across a multi-entity ecosystem, and driving a consistent, governed, and resilient security baseline across the entire Group.\nLegacy, reactive security practices are being replaced with a Zero Trust architecture – deploying Microsoft’s full security stack across identity, endpoints, cloud apps, data, and network. The project aims at strengthening detection and response capabilities to protect a high-growth insurance business operating under Lloyd’s, UK GDPR, and MAS regulatory frameworks.\nTech Stack\nMicrosoft Entra ID, Microsoft Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, Microsoft Sentinel, Microsoft Purview, Intune, Conditional Access, Azure, Microsoft Zero Trust framework, Terraform.\nKey Deliverables & Challenges\nThe primary objective is hardening the Group’s security posture across a multi-entity structure and building operational capabilities to detect, respond to, and recover from security events. Main areas of engagement:\nDeploying and Optimizing Microsoft Defender XDR: Onboarding entities to Defender for Endpoint, Defender for Identity, and Defender for Cloud Apps, alongside integrating operational signals into Microsoft Sentinel as the central SIEM/SOAR platform.\n\nIdentity and Access Hardening: Implementing Zero Trust identity controls including phishing-resistant MFA, Privileged Identity Management (PIM), Conditional Access policies, and Active Directory security hardening across hybrid on-premises and Entra ID environments.\n\nSecurity Operations & Incident Response: Co-operating with external MDR providers to optimize operational response workflows.\n\nSecurity Policy Standardization: Developing, documenting, and monitoring compliance with security baselines, configuration standards, and control frameworks across all Group entities worldwide.\n\nCloud and SaaS Security Governance: Securing M365, Azure, and the broader SaaS ecosystem through Purview data classification, DLP policies, MDCA session controls, and continuous posture management.\n\nM&A Security Integration: Execution of a repeatable security onboarding framework for newly acquired entities during continuous business expansion.\n\nProject Environment\nThe engagement takes place within a lean, agile project environment delivering complete security stack coverage across DevOps, Infrastructure Engineering, Security Engineering, and Business Analysis domains, requiring close cross-functional alignment with business stakeholders to facilitate effective knowledge transfer and strict integration with strategic goals.\n\nRequired Technical Expertise & Capabilities\n5+ years of track record in Cloud/SaaS Infrastructure Security consulting or engineering engagements.\n\nHands-on expertise with Microsoft Security Stack including Entra ID, Microsoft Defender, Intune, Network Security, and Cloud Security.\n\nProficiency in security practices: incident response, security analysis, and posture hardening.\n\nDemonstrated experience in securing and maintaining Microsoft Stack services.\n\nExperience with insurance infrastructure ecosystems is a plus.\n\nFormal background in Computer Science, STEM, or equivalent practical industry expertise.\n\nEnglish communication skills at B2+ level or higher.\n\nFamiliarity with security standards and compliance frameworks such as ISO 27001 / SOC-2 is advantageous.\n\nA few perks of being with us\nBuilding tech community\n\nFlexible hybrid work model\n\nHome office reimbursement\n\nLanguage lessons\n\nMyBenefit points\n\nPrivate healthcare\n\nTraining Package\n\nVirtusity / in-house training\n\nAccess to the above perks is optional and completely voluntary for B2B contractors\nTech stack\nCloud\nSaaS\nEntra ID\nMicrosoft Defencder\nIntune\nNetwork Security\nMicrosoft","description_format":"text","description_chars":5002,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Home office","Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","Logistics","Investment Banking & M&A Advisory","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-08T23:50:21Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":21,"reasons":["seen:2","velocity","win:early"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/virtuslab-security-engineer","json_url":"https://alion.io/job/virtuslab-security-engineer.json","meta":{"generated_at":"2026-10-12T01:43:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2250,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1440},"rest":"https://alion.io/mcp/rest/get_company?id=1440"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvirtuslab-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvirtuslab-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvirtuslab-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/virtuslab-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvirtuslab-security-engineer"}]}