Cybersecurity Engineer

Overview:

SOFTSWISS continues to expand the team and is looking for a Cybersecurity Engineer.

Deploy, configure, and maintain(as L3) endpoint security solutions
Own the end-to-end vulnerability management process for endpoints
Develop and enforce endpoint hardening standards
Collaborate with the SOC and other security teams to correlate endpoint telemetry with network and cloud events for threat detection and response
Participate in the resolution of endpoint-related security incidents

3+ years of hands-on experience in endpoint security engineering, with a focus on Windows and macOS environments
Deep expertise with modern EDR/XDR - deployment, policy configuration, agent management, and L3-level troubleshooting
Proven experience with vulnerability management processes end-to-end: asset discovery, prioritization, remediation tracking, and reporting
Hands-on experience with MDM solutions (Jamf, Intune, or equivalent) - including defining and enforcing security configuration requirements, compliance baselines, and policy rollout
Strong knowledge of endpoint hardening standards for Windows (CIS Benchmarks, STIG) and macOS (CIS macOS Benchmark, NIST guidelines)
Experience developing and maintaining hardening baselines, including scripted or policy-driven enforcement at scale
Ability to formalise security requirements into policies, standards, and control frameworks
Hands-on participation in incident response for endpoint-related security events: containment, investigation, root cause analysis
Solid understanding of attacker TTPs (MITRE ATT&CK framework) as applied to endpoint threat scenarios
Experience in development and automation (Python/Go)
Structured written and oral communication to ensure clarity
Upper Intermediate or higher English level

Security hardening of Linux-based systems
Experience in development and automation (Python/Go)
Solid understanding of attacker TTPs (MITRE ATT&CK framework) as applied to endpoint threat scenarios
Experience with threat hunting on endpoint telemetry - proactively identifying anomalies beyond alert-driven workflows
Understanding of PKI and certificate management as applied to endpoints (device certificates, mTLS, MDM enrollment)
Experience with privileged access controls on endpoints - local admin management, PAM integration, or application allowlisting
Familiarity with DLP solutions and data protection policies at the endpoint level
Familiarity with compliance frameworks relevant to endpoint controls: PCI DSS, ISO 27001, or SOC 2 - particularly mapping hardening standards to control requirements

Full-time remote work opportunities and flexible working hours
Private insurance
Additional 1 Day Off per calendar year
Sports program compensation
Comprehensive Mental Health Programme
Free online English lessons with a native speaker
Generous referral program
Training, internal workshops, and participation in international professional conferences and corporate events