Cybersecurity Engineer

About the role

Altura Partners is helping a fast‑growing international infrastructure company strengthen its security posture in Milan. The Cybersecurity Engineer will work hands‑on to protect the corporate IT environment across cloud, SaaS, identity, endpoints and business applications, collaborating with regional IT, global security and compliance teams.

Key responsibilities

• Implement and maintain security controls for Microsoft 365, Azure, Entra ID, endpoints, SaaS platforms and business applications.
• Monitor security events, investigate alerts and support incident response.
• Manage IAM controls including MFA, conditional access, privileged access, RBAC and access reviews.
• Assess security of application integrations, APIs, data flows and automation platforms.
• Support risk assessments, vulnerability management, log analysis, audits and forensic investigations.
• Drive compliance activities for ISO 27001/27002, SOC 2, NIS2, GDPR and related customer requirements.
• Collaborate with IT, security and compliance teams to improve regional security processes.
• Contribute to disaster recovery and business continuity planning for IT systems and cloud services.

Required profile

• Proven experience in cybersecurity for internal IT, enterprise technology or infrastructure‑heavy environments.
• Strong knowledge of Microsoft 365, Azure, Entra ID, conditional access, MFA, RBAC and access reviews.
• Hands‑on experience securing cloud services, SaaS applications, endpoints and integrations.
• Familiarity with security tooling such as endpoint protection, EDR, SIEM, vulnerability management, email security and identity protection.
• Comfort working with compliance frameworks (ISO 27001/27002, SOC 2, NIS2, GDPR).
• Excellent communication skills in English, able to work with both technical and non‑technical stakeholders.

Required skills

• Microsoft 365
• Azure
• Entra ID
• Conditional Access
• MFA
• RBAC
• Endpoint Protection
• EDR
• SIEM
• Vulnerability Management
• Email Security
• Identity Protection
• CrowdStrike (nice to have)
• Tenable (nice to have)
• Python (nice to have)
• PowerShell (nice to have)
• Bash (nice to have)

What we offer

• Exposure to a high‑availability, compliance‑driven environment serving major technology companies.
• Opportunity to work on a broad security scope covering cloud, identity, endpoint, SaaS and incident response.
• Hybrid work model in a key European hub.