Cybersecurity Operations Engineer / Expert

Overview

In a context of strong growth and innovation, Circet Italia is looking for a SecOps Engineer who, in a hybrid, Cloud and Microsoft 365 environment, will play a key role in day-to-day security operations. The role focuses on detection, analysis and incident response, working closely with internal IT teams and a 24/7 SOC.

Responsibilities

• Monitoring and Detection – Ensure continuous monitoring of security controls and platforms; detect, analyze and qualify suspicious or malicious activity; maintain efficient and actionable detection with a low false positive rate.
• Alert Analysis and Triage – Assess and prioritize security alerts based on risk and impact; qualify incidents and provide clear, actionable diagnostics; escalate appropriately to the SOC or relevant IT teams.
• Security Incident Response – Actively contribute to security incident response; support containment, mitigation and remediation actions; coordinate with the 24/7 SOC and internal stakeholders.
• Security Posture and Continuous Improvement – Contribute to security hardening and configuration improvements; improve detection rules and operational security controls; leverage incident feedback to strengthen overall posture.
• Documentation and Reporting – Document incidents and security actions clearly; contribute to concise, risk-oriented security reporting.
• Microsoft 365 Security – Contribute to the secure operation of Microsoft 365 environments; monitor and analyze security alerts related to identity, email and collaboration usage; participate in Microsoft 365 security incident response; support configuration hardening and continuous control improvement; contribute to awareness initiatives around identity and email-based risks.
• Collaboration and Governance – Work closely with Support, Infrastructure, Cloud and Digital teams; interface with the 24/7 SOC and security partners; participate in incident simulation exercises; contribute to security procedures and runbooks; operate within the group security governance framework.
• Security Environment – Azure Cloud and on-prem environments; endpoint and workload protection (EDR/XDR); SIEM and detection platforms; Microsoft 365 security stack; ZTNA, Secure Web Gateway, DLP; interaction with a 24/7 SOC and threat intelligence services.

Requirements

• Master\'s degree in Computer Engineering
• Italian and professional fluency in English both spoken and written (liv. C2)
• Around 5 years of experience in SecOps, SOC or security operations
• Strong understanding of Cloud, hybrid and collaborative environments
• Solid incident detection and response mindset

Key Skills

• Pragmatic, outcome-driven approach

Headquarter: San Giovanni Teatino (CH).