Senior Security Engineer Coimbra

Senior Security Engineer
Coimbra
Coimbra, Coimbra District, Portugal

Job Title: Senior Security Engineer

Salary: Competitive + Benefits!

Location: Hybrid working, home & our Tech Hub in Coimbra (Monthly visits)

Working Hours: Monday - Friday, 40 hours

Job Status: Permanent

Who we are!

The Constellation Automotive Group is the largest vertically integrated digital car marketplace in Europe, combining the leading digital brands across the segments of Consumer to Business (C2B), Business to Business (B2B) and Business to Consumer (B2C). Across our digital platforms we exceed £20 billion of Gross Merchandises Value (‘GMV’) on an annual basis. This includes market leading brands such as BCA, We Buy Any Car, cinch and Marshall.

The Constellation Technology Team provides a
- wide set of Technology Products and Services across the Constellation Automotive Group. We are a central function working across the following domains: Technology Operations, Cyber Security, Product, Engineering, Enterprise Applications, Logistics, Architecture and Portfolio; across the UK and Europe.

Now, this is where you fit in…

As the Security Engineer specializing in Azure and Microsoft 365, you will be the
- to expert for Microsoft security and compliance tooling, overseeing the architecture and implementation of security solutions. You will be responsible for configuring, optimizing, and driving adoption of key security technologies, working across teams to identify and solve security challenges in our Microsoft ecosystem.

Key Responsibilities

• Lead Microsoft Security & Compliance: Be the authority on Microsoft Defender for Cloud, Microsoft 365 Defender, Azure AD (Entra ID), Azure Policy, and Microsoft Purview.
• Architect and Configure Security Solutions: Design secure, scalable architectures aligned with Zero Trust principles and best practices.
• Rollout and Adoption: Plan and execute comprehensive rollouts of security tools across the organization, ensuring full integration and adoption.
• Train and Empower Teams: Deliver training, workshops, and documentation to ensure teams are equipped with the knowledge to use security tools effectively.
• Collaborate on Vulnerabilities: Support the Threat & Vulnerability Management (TVM) team to address vulnerabilities, providing architectural guidance to mitigate risks.
• Drive Governance & Compliance: Enforce governance frameworks, work with stakeholders on risk assessments, and ensure compliance with regulatory standards such as GDPR, ISO 27001, and NIST.
• Optimize Performance & Cost: Balance robust security with performance and
  - effectiveness, using tools like Azure Monitor and Cost Management to optimize resources.

Key Skills

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent work experience).
• Hands-on experience in cloud security with proven expertise in Microsoft security and compliance tools (Azure, M365, Microsoft Defender, Microsoft Purview).
• In-depth knowledge of identity and access management using Azure AD (Entra ID), Conditional Access, and advanced security features (e. g. , Just-in-Time, Privileged Identity Management).
• Familiarity with cloud security frameworks (CIS Azure Foundations, NIST) and relevant compliance standards (GDPR, ISO 27001, PCI-DSS).
• Automation and scripting proficiency (Power
  Shell, Azure CLI, Terraform, Bicep) to deliver repeatable, consistent security solutions.
• Excellent communication and presentation skills with the ability to train and influence diverse audiences.
• Team player with strong collaboration skills, capable of driving
  - team security initiatives.
• Preferred Certifications: Microsoft Certified: Azure Security Engineer Associate, Microsoft 365 Certified: Security Administrator Associate, CISSP, or similar.

We are considering applicants for this role both in the UK & in Portugal.

Please note that only applications submitted in English will be considered.

Our policy is to employ the best qualified people and provide equal opportunity for the advancement of employees including promotion and training and not to discriminate against any person because of gender, race, ethnicity, age, sexual orientation, religion, belief or disability.