IT Security Engineer

The company is seeking a Senior IT Security Engineer based in Zürich to design and operate security controls for a cloud-first aerospace and defence environment. The role focuses on translating policies into technical solutions, managing risk, and leading incident response.

This position is responsible for safeguarding a distributed, cloud-first infrastructure that supports critical aerospace and defence technologies. The engineer will translate high-level security policies into practical technical controls, ensure compliance with strict national security standards, and proactively manage risk while leading incident response efforts.

Responsibilities

• Create and maintain IT security policies, standards, and operational procedures.
• Convert risk assessments, ISMS mandates, and regulatory duties into actionable technical controls.
• Support the development of cybersecurity roadmaps that align with the broader group strategy.
• Establish and enforce security baselines for Microsoft 365, Entra ID, Intune, AWS, and on-premises Unix and Microsoft systems.
• Configure and manage secure settings for identity and access management, conditional access, logging, and monitoring.
• Partner with IT and engineering groups to secure Windows, macOS, and Linux endpoints.
• Deploy and refine SIEM/SOAR detection rules to cover primary attack surfaces.
• Establish logging protocols, alerting mechanisms, and runbooks for IT support and operations.
• Lead or assist in the investigation of complex cybersecurity incidents.
• Work closely with the IT Security Operations Center (SOC).
• Manage the end-to-end delivery of significant security projects.
• Collaborate with IT on network segmentation, VPNs, and secure connectivity.

Requirements

• Bachelor's degree in computer science, information security, engineering, or equivalent practical experience.
• Minimum of 5 years of hands-on experience in IT security engineering, systems engineering, or cloud security.
• Proven track record of delivering security projects with measurable impact.
• Strong experience with Microsoft 365 / Entra ID / Intune and AWS security configuration.
• Good knowledge of at least one major cloud platform beyond Azure from a security and operations perspective.
• Solid understanding of networking (TCP/IP, routing, VPN, firewalls, DNS) and how to apply segmentation and connectivity securely.
• Experience with SIEM/SOAR tools and log management.
• Experience with endpoint security and management across Windows, macOS, and ideally also Linux.
• Ability to script/automate (PowerShell, Python, or similar) for policy deployment, hardening, and monitoring.
• Familiarity with information security management and risk handling.
• Understanding of secure software and infrastructure practices.

Nice to have

• Certifications such as CISSP, CISM, CEH, or equivalent.
• Experience working in or with regulated environments (aviation, defence, safety-critical systems, or similar).
• Any additional European language.

What the company offers

• Work on cutting-edge projects that redefine aerospace.
• Collaborate with top engineers from all over the world.
• Experience the rush of working in a rapidly expanding company.
• Your work won't be theoretical—it will shape the future of flight.

About the company

Destinus is revolutionizing the defense industry with cutting-edge Unmanned Aerial Vehicles (UAVs). Destinus partners with government agencies and defense organizations worldwide.

• Destinus is revolutionizing the defense industry with cutting-edge Unmanned Aerial Vehicles (UAVs).
• Destinus partners with government agencies and defense organizations worldwide.