Corporate Security Engineer (Endpoint and ISG)

Location: Nicosia, Cyprus

Company

hirify.global TECH RESEARCH GROUP Limited operates a corporate technology environment with a mixed fleet of laptops and mobile devices.

What you will do

• Define, enforce, and measure endpoint and identity controls under the ISG Policy across laptops, mobile devices, browsers, email, and cloud applications.
• Maintain device enrolment, naming conventions, CIS benchmark compliance, endpoint detection and response, and critical patching within a 7-day SLA.
• Prevent and investigate data leakage, malware, phishing, account takeover, insider risk, and infostealer-related credential exposure.
• Enforce managed-device posture, centrally control browsers and third-party application access, and separate work and personal data on mobile devices.
• Own SSO, MFA, joiner-mover-leaver access, quarterly access reviews, security awareness training, and phishing simulations.
• Write response playbooks with pre-approved containment actions, including account disabling, laptop isolation, and device wiping; deliver the first five data leakage and threat detections in the first 90 days.

Requirements

• 4+ years of endpoint or corporate security experience across multiple desktop and mobile operating systems.
• Hands-on experience with enterprise device management platforms, including MDM and UEM.
• Hands-on experience with data loss prevention, context-aware access, and OAuth application control in SaaS collaboration suites.
• Experience with zero trust access, such as Cloudflare Zero Trust or a similar platform.
• Ability to script in Bash, Python, or Apps Script to automate checks and fixes.
• Experience rolling out restrictive controls to developers without interrupting printing, video calls, local Docker work, or other required workflows.

Nice to have

• Experience mapping controls to SOC 2 or ISO 27001.
• CIS benchmark authoring or compliance-as-code tooling experience.
• Familiarity with GDPR rules concerning employee monitoring.

Culture & Benefits

• Full-time role reporting to the Head of Security and working with Corporate IT.
• Corporate IT manages enrolment and user support while this role defines controls, proves compliance, and responds to alerts.
• Security controls must protect company devices and data without preventing developers from working.