Job
Description
The Position Join our team at dsm-firmenich, as part of the Digital & Tech Cyber Security Unit, we are seeking to recruit a motivated Cybersecurity Engineer specialized in system hardening, email security, and Entra ID to join the CyberSecurity Engineering team. You ll play a crucial role in designing, implementing, and managing security controls to protect our organization against email-based threats, phishing attacks, and other collaboration security risks. You will also contribute to the continuous enhancement of our security capabilities across IT, OT, and R&D environments. Key Responsibilities Design, implement, and manage email security solutions using Microsoft Defender for Office 365 (MDO) and/or ProofPoint, ensuring robust protection against phishing and malware. Develop and enforce Entra ID/Azure AD Conditional Access policies, including phishing-resistant MFA and passwordless authentication, to strengthen identity security and move towards a Zero Trust architecture. Implement and maintain system hardening standards for client and server OS images, adhering to industry benchmarks like CIS and NIST, and ensuring compliance with security requirements. Enhance the security of Microsoft Entra ID components, such as Enterprise Applications and App Registrations, to minimize potential vulnerabilities. Continuously improve email security protocols (SPF, DMARC, DKIM) for all company-owned domains, ensuring email integrity and preventing spoofing. Monitor and analyze security logs and threat intelligence to identify and respond to security incidents, providing recommendations for security improvements across Microsoft products and services. At dsm-firmenich, being a force for good is not optional. Diversity, Equity & Inclusion is a shared responsibility woven into our daily work to not only benefit our People, Customers & Communities but also drive business value. Equal access to opportunities is a given, belonging is a shared feeling, authenticity is celebrated. We Bring Opportunity to work with cutting-edge cybersecurity technologies and solutions. A collaborative and supportive team environment with experienced cybersecurity professionals. Exposure to a diverse range of security challenges across IT, OT, and R&D environments. Opportunities for professional development and training in the latest cybersecurity trends and technologies. A dynamic and international work environment with geographically distributed teams. Access to Microsoft product training and resources to enhance your expertise. You Bring Extensive hands-on experience with Entra ID and Azure AD Conditional Access policies. Deep knowledge of email security gateways (Microsoft Defender for Office 365, ProofPoint) and related protocols (SPF, DMARC, DKIM). Strong understanding of Microsoft product security features and best practices. Proven ability to implement and maintain robust email security measures, including advanced phishing detection and threat intelligence integration. Demonstrated experience in system hardening and security assessments, with a focus on industry standards (CIS, NIST). Solid understanding of email security threats, phishing techniques, and mitigation strategies, coupled with excellent analytical and problem-solving skills.
