Information Security Engineer

The Information Security team is essential to safeguarding our software, services, and cloud environments. As the organisation's delivery capacity grows, early security engagement and technical expertise have become critical to maintaining trust, compliance, and resilience.

• Review and enhance Entra Conditional Access policies.
• Monitor privilege management usage and access reviews.
• Lead investigation and proposal for multitenant Entra management.

• Expand and fine-tune DLP policies across cloud platforms.
• Monitor compliance indicators and identify gaps.

• Improve Defender for Cloud configurations.
• Daily monitoring across Taegis, Microsoft Defender, Prisma, Tenable.
• Reduce noise and strengthen detection workflows.

• Validate security controls through internal audits.
• Drive vulnerability investigations and coordinate remediation.

• Support Blue Team and Purple Team exercises.
• Organise and manage penetration testing.
• Conduct threat modelling and maintain threat intel feeds.

• Embed security early in SDLC.
• Perform secure code reviews and manage Snyk SCA/SAST.
• Implement and manage Snyk DAST.

• Review and optimise firewall rules.
• Monitor Defender for Apps.
• Recommend Azure Front Door and WAF best practices.

• Improve Taegis and Drata integrations.
• Continuously harden systems and stay updated on threats.
• Optimise detection, response, and compliance processes.

Munich Re Automation Solutions fosters a culture defined by forward-thinking, continuous improvement, innovation, and dependable execution. The principle "Think Ahead, Deliver Today" guides how teams anticipate future needs while delivering quality solutions. Cultural pillars such as Better Together, Celebrate Success, Inspire Trust, Push Boundaries support collaboration, accountability, and customer-centricity.

• Strong knowledge of cloud security (Azure), IAM, Zero-Trust.
• Experience with SIEM/SOAR and vulnerability management.
• Knowledge of SCA/SAST/DAST tools and secure coding.
• Strong collaboration skills with engineering teams.
• Analytical capability to interpret security signals.

• Proactive, solution-oriented mindset.
• Clear communication and trust-building abilities. xcfaprz
• Adaptable, curious, and motivated by securing cloud environments.