Information Technology Security Engineer

With over 2600 employees in 28 subsidiaries across the EMEA region, ASBIS is a pre-eminent global value add distributor, OEM, and solutions provider. We are distinguished by our in-depth industry insight and 32+ years of experience as a reliable global partner for clients and suppliers. We are proud of being one of the certified companies by Great Place to Work®, the global authority on workplace culture, as we believe that our true asset is people. ASBIS invests a lot to create a workplace where every employee has consistently positive experience, professional growth, and appropriate support to unlock their potential and build a future with the Company. Whatever your area of expertise and specialization, you will find a range of career opportunities at ASBIS. About the position: We are building an ISO/IEC 27001-aligned information security management system, integrated with our ISO 9001 quality system, and preparing for NIS2. This isthe first dedicated security engineering role in the Group: you will design and run a single Group-wide SOC, raise our technical security controls, and run internal technical security audits. It is a hands-on lead role: you build much of it yourself, then grow it with partners (MDR/MSSP) and, later, a team. What You’ll Do: - Design the SOC architecture and operating model; select and tune the SIEM (Wazuh /Microsoft Sentinel underevaluation). - Write and maintain detections (KQL, Sigma, Wazuh rules); reduce false positives. - Lead technical incident response: triage, evidence, containment, root cause, lessons learned. - Harden Microsoft 365, Entra ID, Active Directory, Windows/Linux servers, network and backup. - Own vulnerability scanning and pentest follow-up with IT teams. - Plan and perform internal technical audits of IT controls; turn findings into tracked actions. Audits of controls you built are performed independently. - Manage security vendors (MDR/MSSP, pentesters) against SLAs. - Automate SOC work (Python / PowerShell, SOAR, AIassisted triage within Group AI policy). Must have: - 5+ years in technical security, incl. 2+ years in SOC, detection engineering or incident response. - Has built (not only operated) a SOC, SIEM or security monitoring process. - Deep Microsoft security: Entra ID, Conditional Access, PIM, Intune, Defender XDR, M365 audit logs, KQL. - Active Directory attack paths and hardening (tiering, BloodHound / PingCastle). - Windows forensics and EDR telemetry; vulnerability scanners; CIS benchmarks. - Scripting in Python and/or PowerShell; Git. - Working knowledge of ISO/IEC 27001:2022 Annex A, NIS2 and GDPR incident notification. - English B2+ (all documentation in English). Nice to have: - ISO 27001 internal / certification audit experience; multicountry group. - Microsoft Sentinel, Azure security, SOAR (Shuffle, TheHive, MISP). - Certifications: SC-200 / SC-300, GCIH / GCFA, BTL, OSCP / - CRTO, ISO 27001 LA. We offer: - Work for a financially strong, fast-growing multinational company. - Access to continuous professional development: training, certification programs, events, and team buildings. - Competitive salary package and motivation scheme. - Work-from-home option. - International career opportunities. We are on a mission to bring technology to everyone and are looking for new colleagues. Are you the one? Apply now. By applying for the above position, you will confirm that you have reviewed and agreed to our Privacy Notice https://www.asbis.com/privacy-policy