Senior Cybersecurity Engineer (Azure)

Location: Kerry, Ireland; hybrid work with on-site attendance one to two times per month

Contract: Permanent, full time

Company

Fexco operates a cybersecurity function focused on protecting cloud environments, systems, data, and infrastructure.

What you will do

• Design, implement, and own security controls across Microsoft Azure and other cloud platforms, including identity, network, workload, and data protection.
• Write, review, and maintain Terraform and Bicep/ARM configurations for secure, compliant infrastructure as code.
• Implement Azure security controls using Azure Policy, Microsoft Entra ID/IAM, network security groups, and Key Vault.
• Integrate and tune Palo Alto Cortex/XSIAM, Microsoft Defender, and Sentinel security tooling; develop SIEM/SOAR use cases and detection logic informed by threat intelligence and MITRE ATT&CK.
• Lead complex incident investigations, containment, remediation, vulnerability management, and lessons-learned improvements.
• Collaborate with IT, cloud, architecture, and DevOps teams; mentor engineers and SOC analysts; maintain security operations playbooks, runbooks, KPIs, and SLAs.

Requirements

• 7+ years of experience in cybersecurity engineering, cloud security, infrastructure security, or related disciplines.
• Hands-on experience securing cloud environments, particularly Azure, with strong infrastructure-as-code capabilities and the ability to write, review, and maintain Terraform configurations.
• Experience implementing Azure-native security controls, including Azure Policy, RBAC, and Microsoft Entra ID.
• Expert knowledge of SIEM, SOAR, EDR, and IAM platforms, such as Microsoft Sentinel, Microsoft Defender, and Palo Alto Cortex/XSIAM, with depth in Azure cloud security architecture.
• Degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Strong understanding of enterprise architecture, threat modelling, and attacker TTPs.
• Proven experience leading engineering projects and advising senior stakeholders.
• Automation and scripting capability with Python and PowerShell.
• Excellent communication skills with technical and non-technical stakeholders.

Nice to have

• Microsoft Azure security certifications, including SC-500, SC-100, SC-200, or SC-300, or equivalent certifications such as CCSK, CCSP, CISSP, or CISM.
• Experience designing secure architectures for Azure, AWS, or GCP.
• Experience supporting regulated industries and compliance frameworks.
• Exposure to DevSecOps, infrastructure as code with Terraform or Bicep/ARM, and cloud-native security.

Culture & Benefits

• Permanent, full-time position with senior ownership of cloud security engineering and security operations capabilities.
• Opportunity to help shape a maturing cybersecurity function.
• Cross-functional collaboration with IT, cloud, architecture, and DevOps teams.
• Equal-opportunity workplace that welcomes applicants from all backgrounds.

Hiring process

• Apply online.