Operation Security Engineer

At SCOR, we combine the Art and Science of risk to help build more resilient societies. Technology is a vital resource and partner in every step of our journey. We are seeking innovators to join our dynamic tech team of over 200 professionals across three global hubs. Guided by our corporate values--Collaboration, Courage, Care, Open-Mindedness, and Integrity--our teams develop technology that insures the world. Join us and make a difference!

We are seeking a skilled and proactive Operations Security Engineer to join our IT Security Operations team. This role is ideal for someone with a strong background in IT infrastructure and a passion for securing enterprise environments. You will be responsible for implementing and maintaining security controls across SCOR's systems, networks, and cloud environments. Your work will focus on operational security tasks such as email and endpoint protection, cloud configuration, certificate management, and incident response. You will play a key role in ensuring the confidentiality, integrity, and availability of SCOR's digital asset

As an Operations Security Engineer, you will be responsible for the day-to-day security operations that protect SCOR's IT infrastructure. You will manage and monitor security tools, respond to alerts, and ensure secure configurations across cloud, network, and endpoint environments. You will also support the secure management of digital identities, secrets, and certificates, and collaborate with IT teams to enforce security best practices.

Key Responsibilities:

• Security Systems Management: Install, configure, and maintain security tools and systems (e.g., firewalls, IDS/IPS, endpoint protection, SIEM). Ensure all security devices and applications report logs to centralized logging systems.
• Network & Infrastructure Security: Monitor and secure network infrastructure, including VPNs, DNS, and remote access. Maintain secure configurations for servers, routers, switches, and cloud environments.
• Cloud Security Operations: Manage and audit cloud security configurations using tools like Azure Policies, Wiz, and Defender for Cloud. Enforce cloud security baselines and monitor for misconfigurations.
• Email & Web Security: Configure anti-spam, phishing filters, and secure email gateways. Monitor and protect public-facing websites from malicious traffic and attacks.
• Certificate & Secret Management: Manage the lifecycle of public and internal certificates (SSL/TLS, PKI). Securely store and rotate secrets, API keys, and credentials using vaulting solutions.
• Endpoint Security Hardening: Implement and enforce endpoint protection policies. Monitor and respond to endpoint threats across user and server environments.
• Public Domain & Asset Protection: Manage the lifecycle and protection of public domains and digital assets. Ensure DNS and domain configurations are secure and monitored.
• Security Automation & Documentation: Automate routine security tasks using scripting (e.g., PowerShell, Python).
• Collaboration & Communication: Work closely with IT, DevOps, and compliance teams to ensure secure operations. Communicate security risks and incidents clearly to technical and non-technical stakeholders.

Key Duties:

• Configure and monitor security tools across infrastructure, cloud, and endpoints.
• Respond to security alerts and incidents.
• Manage certificates, secrets, and domain portfolios.

Collaborate with IT and external partners to enhance security posture

Required experience & competencies

Must adhere to our Key Security Principles and Team Values:

Security Principles: Defend the business, support the business, and promote responsible information security behavior.

Team Values: Professionalism, Ethics, Transparency, and Team Spirit.

Your expertise in operational security will be key in supporting technical teams and ensuring the resilience of SCOR's digital infrastructure.

Hard skills

      Strong knowledge of:

• Network security (firewalls, IDS/IPS, DNS security, VPNs).
• Cloud security tools and configurations (Azure, AWS, CSPM, EDR for Cloud).
• Email security platforms (e.g., Microsoft Defender for Office 365, Proofpoint).
• Endpoint protection and hardening (Windows, Linux, macOS).
• Certificate and key management (PKI, SSL/TLS).
• Secret management tools (e.g., HashiCorp Vault, Azure Key Vault).

• SIEM platforms and alert triage (e.g., Microsoft Sentinel, Splunk).

  .

  Experience with:

• Managing public and internal certificates.
• Monitoring and protecting public-facing websites.
• Automating security operations using scripting (PowerShell, Python, Bash).

• Implementing and maintaining secure configurations and policies.

  Soft skills

• Strong analytical and problem-solving skills.
• Effective communication and collaboration abilities.
• Ability to manage multiple security domains simultaneously.
• High attention to detail and organizational skills.

Education 

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or a related field.

• Preferred certifications: CompTIA Security+, Microsoft SC-200, Azure Security Engineer Associate, or equivalent.