IT Security Engineer at Destinus | Zürich

Key ResponsibilitiesSecurity Architecture and StrategyDevelop and implement comprehensive IT security policies, standards, and procedures, advancing our IT and cloud environments toward cybersecurity best practices and zero-trust principles. Transform risk assessments, ISMS requirements, and regulatory obligations (ISO 27001, NIST, export control/defense standards) into effective technical controls. Contribute to the cybersecurity roadmap aligned with corporate strategy, including the transition from a Google-centric to a Microsoft-based architecture. Cloud and Enterprise Security EngineeringDesign and implement cybersecurity baselines for Microsoft 365, Entra ID, Intune, AWS, and on-premise Unix and Microsoft systems, ensuring integration with existing environments. Establish and maintain secure configurations for identity and access management, conditional access, logging, and monitoring across cloud and on-premise platforms. Collaborate with IT and engineering teams to fortify Windows, macOS, and Linux endpoints utilizing EDR, MDM, and configuration management tools. Monitoring, Detection, and Incident ResponseImplement and fine-tune SIEM/SOAR detections (e.g., Microsoft XDR or equivalent) to cover critical attack surfaces. Define logging, alerting, and runbooks for IT support and operations teams. Lead or support investigations of security incidents, ensuring rapid and effective response.