Security Engineering Lead

About the role

We are seeking an experienced Security Engineering Lead to own the Security Engineering domain across a complex European IT estate. You will be responsible for delivering security engineering services, ensuring NIS2 compliance, and acting as the primary interface with the client’s CISO organization.

Key responsibilities

• Own the Security Engineering domain for the client’s managed infrastructure.
• Maintain NIS2 controls, audit evidence, and sign‑off chain.
• Lead security transition activities, including tooling onboarding, risk assessments, documentation, and service‑readiness validation.
• Govern offshore security engineers in Hungary and Romania for BAU operations, alert triage, vulnerability remediation, and IAM/PAM activities.
• Collaborate with the client’s retained SOC while keeping clear accountability boundaries.
• Manage security incidents through investigation, communication, and escalation processes.
• Define, monitor, and report security posture, vulnerability, and remediation metrics.
• Drive SOAR adoption and automated remediation initiatives.
• Provide design oversight for a strategic IAM migration programme.

Required profile

• 7–10 years of professional experience in security engineering.
• Proven leadership of distributed engineering teams.
• Strong hands‑on experience with Privileged Access Management (PAM) and IAM programmes.
• Deep knowledge of NIS2 requirements and compliance controls.
• Experience working with Security Operations Centre processes and escalation procedures.

Required skills

• Privileged Access Management (PAM)
• Identity and Access Management (IAM)
• Security Information and Event Management (SIEM) platforms
• Vulnerability management (assessment, prioritisation, remediation)
• NIS2 compliance controls
• Security Orchestration, Automation and Response (SOAR)
• Security tooling onboarding and automation
• IAM migration design and implementation