For an international team, we are looking for the Cybersecurity Engineering Lead specializing in the Microsoft Defender and Sentinel ecosystem. Key responsibilities are architecting, deploying and managing advanced security solutions using Microsoft Security tools. This role ensures that our B2B customers' digital assets are protected through proactive threat detection, automated response, and continuous improvement of IT security within Microsoft environment.
Key Responsibilities
1. Leadership & Collaboration
- Lead an international team of engineers focused on Microsoft security technologies.
- Collaborate with IT, cloud, and compliance teams to integrate Defender and Sentinel into enterprise-wide security strategies.
- Act as a subject matter expert for Microsoft security solutions across the organization.
2. Microsoft Defender Suite Management
- Oversee deployment and configuration of Microsoft Defender for Endpoint, Identity, Cloud, Office 365 and IoT.
- Ensure real-time threat protection, attack surface reduction, and endpoint detection and response (EDR) capabilities are optimized.
- Monitor and tune Defender policies to balance security and user experience.
3. Microsoft Sentinel Operations
- Design and maintain Microsoft Sentinel architecture for scalable and efficient SIEM and SOAR capabilities.
- Develop and manage KQL queries, analytics rules, hunting queries, and playbooks for automated incident response.
- Integrate Sentinel with other Microsoft and third-party data connectors to enrich threat intelligence.
4. Threat Detection & Incident Response
- Lead threat hunting activities using Sentinel and Defender telemetry.
- Coordinate incident response efforts, leveraging Microsoft security orchestration tools.
- Continuously improve detection logic and response workflows based on threat trends and post-incident reviews.
5. Compliance & Reporting
- Ensure alignment with regulatory frameworks (e.g., GDPR, ISO 27001, NIS2) using Microsoft Compliance Manager and Purview.
- Generate reports and dashboards for executives and auditors using Microsoft Security Center and Sentinel workbooks.
- Maintain documentation and evidence for audits and assessments.
6. Continuous Improvement & Innovation
- Stay current with Microsoft evolving security capabilities and roadmap.
- Drive automation using Logic Apps, PowerShell and Microsoft Graph API.
- Promote security awareness and best practices across teams.
Skills & Qualifications
- Deep expertise in Microsoft Defender and Microsoft Sentinel.
- Strong knowledge of KQL, Azure security services, and Microsoft 365 security & compliance.
- Experience with incident response, threat hunting, and security automation.
- Familiarity with Power Platform, Azure AD, and Microsoft Intune is a plus.
- Relevant certifications: SC-200, SC-300, SC-400, AZ-500 or MS-500.
- Experience with managing a small team of technicians
We offer our people the best
- Smartphone: Choose your phone and get a compensation of up to 23,100 CZK every 3 years.
- Employee tariff: Use unlimited data, call and text for lower prices for private and business purposes.
- Yearly bonus: You can get a bonus of up to 15% of your annual fixed salary each year depending on the company’s success.
- T-Mobile discounts: Enjoy the 75% discount on 8 T-Mobile services for your family and friends.
- Partner discounts: Enjoy lower prices of products and services with our partners.
- Flexible hours: Adapt your work to your needs thanks to the home-office option (according to the agreement with the manager).
- Shares program Shares2You: Become a shareholder of the Deutsche Telekom Group and take advantage of the associated benefits.
- Rest and recreation: Relax with 6 weeks of holidays and 1 free day for charity activities.
- MultiSport: Sport and relax with your loved ones thanks to the discounted MultiSport card.
- uLékaře.cz: Take care of your health with free online prevention and appointments with medical specialists for you and your whole family.
- Healthcare: Take care of your wellbeing with high-quality care for a discounted price with our contractual facility.
- Education and development: Broaden your horizons with our internal T-Univerzity offering a wide range of courses.
- Cafeteria: Choose from a wide range of benefits worth up to 15,000 CZK per year - sports and cultural services, health and beauty, transport allowances, holidays or language courses.
- Day for a good deed: You can devote one working day a year to volunteering in non-profit organizations and thus contribute to social responsibility together with us.
- Psychological consultations: Are you having troubles in your private or professional life? Share your burden anonymously via phone or online.
- Meal contribution: Enjoy a delicious meal with a work-day allowance of 123.90 CZK.
- Sabbatical: Sometimes we all need to switch off. That’s why, after working for 2 years and upon agreement with your manager, you can take 1 month off to do whatever you need.
- Pension allowance: Get ready for your retirement with a pension allowance after 12 months with us.
Everyone is welcome to join us
Our employees feel that they have equal employment and career development opportunities with us, regardless of age, gender and gender identity, sexual orientation, physical and mental ability, nationality, social and ethnic origin, political views, religion and world view. This makes us very happy. We are committed to continuous improvement and to creating a safe working environment for all.
What awaits you
- Has the job offer captured your interest? Fill in the application form and let us know about yourself.
- We will assess the information you send us and will get back to you under any circumstances.
- We will contact the chosen applicants and specify the details.
- A job interview is a two-way opportunity to get to know each other better.
- We will inform you about the result of the interview as soon as possible. Successful candidates will receive a job offer.
- In our company, according to our job architecture, you will perform the position of „Cybersecurity Engineer, Expert“.
