Cybersecurity Technician

About the role

Microsoft identity, access, and platform

• Manage Microsoft 365 and Microsoft Entra ID security, including identities, access, privileged roles, applications, audit logs, and security controls.
• Design, implement, and maintain security policies related to Conditional Access, MFA, Privileged Identity Management (PIM), and the principle of least privilege.
• Protect and monitor hybrid identity environments (Active Directory and Microsoft Entra ID), ensuring the correct application of access controls, secure synchronization, and the reduction of risks associated with identities and privileges.
• Strengthen account security and privileged access through hardening measures, periodic privilege reviews, and monitoring of their exposure.

What you'll do

• Actively participate in cybersecurity projects, including the implementation and evolution of Privileged Access Management (PAM) solutions.
• Identify improvement opportunities and contribute to strengthening the security posture of the corporate environment, prioritizing actions based on risk and operational impact.
• Automate operational tasks and security controls through scripting with PowerShell, Bash, and, where appropriate, Ansible.
• Collaborate in the definition, implementation, and monitoring of hardening measures and technical security controls.
• Analyze and manage security alerts and participate in incident coordination and response.
• Perform digital forensics investigations (DFIR) on Windows and Linux servers and endpoints, including the acquisition, preservation, and analysis of evidence.
• Prepare technical incident reports, documenting evidence, findings, and mitigation recommendations.
• Collaborate with Systems, Unix/Linux, Networking, and User Support teams for incident resolution and the protection and continuity of critical services.

What we're looking for

• Demonstrable experience in the administration and securing of Microsoft 365 and Microsoft Entra ID environments.
• Hands-on experience in identity and access management, Conditional Access, MFA, PIM, and Microsoft Entra ID roles.
• Knowledge of privileged access management through PAM or equivalent solutions.
• Experience in automation using PowerShell and/or Bash.
• Experience in alert analysis and security incident response.
• Knowledge of Windows Server and Linux oriented toward hardening, security event analysis, and incident response.
• Ability to work autonomously, prioritize actions based on risk, and collaborate with different technical teams.
• Ability to prepare technical documentation and reports.

Nice to have

• Experience in DFIR: evidence acquisition and preservation, Windows/Linux artifact analysis, and incident investigation.
• Experience in the implementation or operation of PAM platforms.
• Knowledge of Ansible and security control automation.
• Experience in university environments or high-availability environments with restricted change windows.
• Knowledge of GDPR and information security.
• Certifications such as SC-300, AZ-500, SC-200, MS-102, CompTIA Security+, CySA+, or equivalent cybersecurity, IR, or DFIR certifications.
• Experience or familiarity with SIEM and EDR technologies and with the creation of incident response procedures and playbooks.
• Technical English.