Senior Security Engineer (fmx)

The Senior Security Engineer is responsible for designing implementing and continuously improving security controls across the corporate IT environment with a strong focus on the Microsoft ecosystem. This role partners closely with IT Infrastructure and other stakeholders to define security requirements deploy technical guardrails and reduce risk through measurable improvements to the organizations security posture. 

Security Engineering & Control Implementation 

• Implement and maintain technical security controls across corporate systems and endpoints (e.g. endpoint security controls secure configuration baselines productivity platform security settings). 

• Drive continuous hardening of corporate IT environments through configuration standards secure defaults and controlled exception handling. 

• Define and maintain security baselines and guardrails that can be rolled out safely at scale in partnership with IT. 

Architecture & Security Requirements 

• Define security requirements for corporate IT initiatives and changes ensuring security-by-design. 

• Create and maintain reference architectures security patterns and implementation guidelines for common use cases. 

• Review high-impact designs and changes to ensure they align with defined security standards. 

Exposure Reduction 

• Establish and operate a practical approach to vulnerability and configuration risk reduction including prioritization guidance and remediation expectations. 

• Drive remediation with IT teams and verify closure (patching and configuration hardening) based on risk and active threats. 

Platform Guardrails & Emerging Risks 

• Implement technical guardrails for high-growth risk areas (e.g. SaaS sprawl Shadow IT/AI usage low-code/no-code platform governance). 

• Support secure adoption of new tools and capabilities by defining security configurations and monitoring requirements. 

Collaboration & Stakeholder Engagement 

• Work closely with IT Infrastructure/Workplace teams to plan rollouts validate impacts and maintain stability while raising security posture. 

• Support Security Operations during incidents with engineering input (containment options hardening improvements root-cause remediation recommendations). 

• Contribute to internal security documentation (standards runbooks technical implementation notes). 

Qualifications :

Technical Skills and Experience 

• 7 years of experience in Cyber-Security roles with expertise in security policies incident response and compliance frameworks. 

• Proven experience in security engineering and/or security architecture within an enterprise environment with significant Microsoft footprint. 

• Strong hands-on knowledge of several of the following: Microsoft Defender suite Microsoft Intune Microsoft 365 security configurations Entra ID security concepts Azure Sentinel Microsoft Purview. 

• Practical ability to implement and operate security controls across endpoint identity-adjacent and productivity/SaaS environments. 

• Experience defining security requirements hardening standards and scalable guardrails (including rollout strategy and exception handling). 

• Working knowledge of security monitoring concepts (logging requirements alerting readiness operational handoffs). 

• Familiarity with ISO/IEC 27001 and NIS2 (and the ability to translate control requirements into practical technical implementations and evidence) is a strong plus. 

Soft Skills 

• Strong stakeholder management skills able to influence and align teams without formal authority. 

• Clear written and verbal communication with both technical and non-technical audiences. 

• Pragmatic risk-based mindset with strong ownership and follow-through. 

Qualifications 

• Bachelors degree in information security Computer Science IT or a related field (or equivalent experience). 

• Security certifications are a plus (e.g. CISSP CISM vendor certifications) but practical delivery experience is most important. 

Additional Information :

Were offering:

• Work in Germanys first green unicorn and actively shape the solar energy revolution. 

• The sun shines all over the world - at Enpal you will find a highly motivated and diverse team with more than 65 different nationalities. 

• Would you rather keep your pet company at home or your colleagues at the office Even after the pandemic we offer you a hybrid working model 

• We fulfill every start-up cliché - in our modern office in Berlin-Friedrichshain or Stuttgart-West youll find everything your heart desires for example a roof terrace and stocked drinks fridges. 

• Your kick-start at Enpal - Get to know the company your team colleagues and our founder Mario on your onboarding day. 

• Stay up to date - Whether its company figures at our monthly all-hands meetings or how a photovoltaic system works at the Lunch & Learn youll always know exactly whats going on. 

• Energy transition only works together - At Enpal you can expect a legendary team spirit and unforgettable team events. 

• No mistakes no progress - We live a strong feedback culture and grow with your input either personally or anonymously via our feedback tool Culture Amp. 

At Enpal we are proud of the diversity of our team. No decisions are made on the basis of skin color religion or religious belief ethnic or national origin nationality gender identity sexual orientation disability or age either during the recruitment process or during the employment relationship. Enpal stands for a safe workplace and takes action against discrimination and harassment of any kind.

Remote Work :

Yes

Employment Type :

Full-time