IT Security Expert (m/f/n), Esch-sur-Alzette

Are you interested in pursuing a career in an exciting field and an innovative company? Enovos, a member of the Encevo group, is constantly on the look out for talented individuals that the group is committed to mentoring and developing in order to allow for professional and personal growth.

Working for Enovos means working for a committed and visionary employer that plays an active role in the energy transition, creating sustainable and innovative perspectives while looking after the interests of its employees and partners.

Tasks

• You ensure the effectiveness and resilience of security controls across a modern IT landscape, including cloud platforms (e.g. Azure, AWS), containerized environments (e.g. Kubernetes, Docker) and infrastructure managed through automation and GitOps practices (e.g. Terraform, GitLab, ArgoCD).
• You monitor and analyse security events using detection and response platforms (e.g. SIEM, XDR, Microsoft Sentinel, Wazuh), investigating anomalies and coordinating appropriate response actions.
• You strengthen the security posture by identifying and managing vulnerabilities through scanning and assessment approaches (e.g. Qualys, Trivy), working closely with engineering teams to ensure timely remediation.
• You contribute to incident detection and response by leveraging log analysis, endpoint and network telemetry, and threat exposure platforms (e.g. Defender, XMCyber), supporting investigation and containment activities.
• You enhance detection and monitoring capabilities by improving use cases, alerting logic and data integration across security and observability platforms.
• You support incident handling from initial triage to resolution, including deeper technical analysis and coordination with internal and external stakeholders.
• You contribute to the secure configuration and continuous improvement of core security controls such as identity and access management (e.g. Azure AD, IAM), network security (e.g. firewalls, WAF, proxy solutions) and endpoint protection.
• You integrate security into engineering workflows by embedding controls into CI/CD pipelines and infrastructure-as-code processes (e.g. GitLab CI), and by leveraging policy-as-code and security automation tools (e.g. Kyverno, Renovate, Trivy), ensuring secure and automated delivery.
• You participate in the evaluation and optimisation of security technologies, including application security testing tools (e.g. MobSF), contributing to their integration within the overall architecture and ensuring their effective operational use.
• You collaborate with DevOps and platform teams to build scalable, secure-by-design solutions aligned with cloud-native and microservices architectures.
• You act as a technical reference for security topics, providing pragmatic guidance and contributing to the continuous improvement of security practices across the organisation

Profile

• You hold a university degree in IT or have an equivalent professional qualification in Cybersecurity or Information Technologies
• You have minimum of 2 years of experience in a similar role
• You have an in-depth understanding of current cybersecurity trends, technologies, and best practices
  
• You are committed of staying updated on the latest security technologies
• You are familiar with dev ops procedures and technologies
• Proven experience of analysing security scans, identifying potential exploits, and recommending appropriate remediation strategies
• Strong expertise in interpreting log data to identify security breach patterns and anomalies
• Excellent communication skills, both written and verbal, with the ability to convey complex technical concepts to non-technical stakeholders
• Experience collaborating with cross-functional teams, particularly with DevOps engineers and other IT professionals
• You have good verbal and written communication skills in English, French and German
• Relevant certifications such as CISSP, CISM, CompTIA Security+, or similar, are highly desirable