Cybersecurity Engineer

Overview: SOFTSWISS continues to expand the team and is looking for a Cybersecurity Engineer. Key responsibilities: Deploy, configure, and maintain(as L3) endpoint security solutions Own the end-to-end vulnerability management process for endpoints Develop and enforce endpoint hardening standards Collaborate with the SOC and other security teams to correlate endpoint telemetry with network and cloud events for threat detection and response Participate in the resolution of endpoint-related security incidents Required Experience: 3+ years of hands-on experience in endpoint security engineering, with a focus on Windows and macOS environments Deep expertise with modern EDR/XDR - deployment, policy configuration, agent management, and L3-level troubleshooting Proven experience with vulnerability management processes end-to-end: asset discovery, prioritization, remediation tracking, and reporting Hands-on experience with MDM solutions (Jamf, Intune, or equivalent) - including defining and enforcing security configuration requirements, compliance baselines, and policy rollout Strong knowledge of endpoint hardening standards for Windows (CIS Benchmarks, STIG) and macOS (CIS macOS Benchmark, NIST guidelines) Experience developing and maintaining hardening baselines, including scripted or policy-driven enforcement at scale Ability to formalise security requirements into policies, standards, and control frameworks Hands-on participation in incident response for endpoint-related security events: containment, investigation, root cause analysis Solid understanding of attacker TTPs (MITRE ATT&CK framework) as applied to endpoint threat scenarios Experience in development and automation (Python/Go) Structured written and oral communication to ensure clarity Upper Intermediate or higher English level Nice to have: Security hardening of Linux-based systems Experience in development and automation (Python/Go) Solid understanding of attacker TTPs (MITRE ATT&CK framework) as applied to endpoint threat scenarios Experience with threat hunting on endpoint telemetry - proactively identifying anomalies beyond alert-driven workflows Understanding of PKI and certificate management as applied to endpoints (device certificates, mTLS, MDM enrollment) Experience with privileged access controls on endpoints - local admin management, PAM integration, or application allowlisting Familiarity with DLP solutions and data protection policies at the endpoint level Familiarity with compliance frameworks relevant to endpoint controls: PCI DSS, ISO 27001, or SOC 2 - particularly mapping hardening standards to control requirements Our benefits: Full-time remote work opportunities and flexible working hours Private insurance Additional 1 Day Off per calendar year Sports program compensation Comprehensive Mental Health Programme Free online English lessons with a native speaker Generous referral program Training, internal workshops, and participation in international professional conferences and corporate events