Overview
Security Engineer Jobs in Birkirkara, Malta at IZIGROUP
Title: Security Engineer
Company: IZIGROUP
Location: Birkirkara, Malta
Role Purpose
The Security Engineer is responsible for implementing, operating, and continuously improving the organisation's cyber security capabilities across enterprise infrastructure, cloud platforms, gaming systems, retail operations, and digital services.
The role focuses on security monitoring, vulnerability management, incident response, identity security, cloud security, and security tooling, helping protect the organisation from cyber threats while supporting operational resilience.
The role operates under a dual reporting structure:
- Operational Reporting: Chief Digital & Technology Officer (CDTO)
- Functional Reporting: Chief Information Security Officer (CISO)
The CDTO is responsible for operational priorities and performance management.
- The CISO provides security direction, standards, governance, and security oversight.
Key Responsibilities:
Security Operations
- Monitor and investigate security alerts and incidents.
- Support cybersecurity incident response and recovery activities.
- Perform security event analysis and escalation.
- Assist with forensic evidence collection and root cause investigations.
- Maintain and improve security monitoring capabilities.
Vulnerability Management
- Perform vulnerability assessments and security scans.
- Monitor external attack surfaces and security exposures.
- Validate vulnerabilities and coordinate remediation activities.
- Track remediation progress and report security risks.
Identity & Access Security
- Support Microsoft Entra ID security administration.
- Maintain Conditional Access and MFA controls.
- Support Privileged Identity Management (PIM).
- Participate in user access reviews and security investigations.
Endpoint & Infrastructure Security
- Support Microsoft Defender and Intune environments.
- Assist with endpoint hardening and security baselines.
- Monitor endpoint security posture and compliance.
Cloud & Platform Security
- Support security controls across AWS, GCP, Cloudflare, and SaaS platforms.
- Assist with cloud security reviews and remediation activities.
- Work with Infrastructure and Cloud Engineering teams to improve security posture.
Security Awareness & Advisory
- Support phishing simulations and awareness initiatives.
- Provide practical security guidance to Technology teams.
- Promote security best practices across the organisation.
Operational Resilience & Security Responsibilities
- Support compliance with WLA-SCS, ISO 27001, GDPR, and security policies.
- Participate in security reviews, audits, and evidence gathering activities.
- Support disaster recovery and cyber incident exercises.
- Assist with security risk assessments and corrective action tracking.
On-Call Responsibilities
The Security Engineer participates in the organisation's cyber security on-call rotation and may be required to provide out-of-hours support for:
- Security incidents
- Critical vulnerabilities
- Ransomware alerts
- Identity compromise events
- Cloud security incidents
- Major operational incidents with security implications
Education, Experience & Technical Skills
Education
- Degree or Diploma in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline.
Experience
- Minimum 3 years' experience in cyber security, infrastructure security, cloud security, or security operations.
- Experience with Microsoft Security technologies.
- Experience with vulnerability management and incident response.
- Experience supporting cloud platforms and modern security tooling.
Preferred Certifications
- Microsoft SC-200 Security Operations Analyst
- Microsoft SC-300 Identity & Access Administrator
- CompTIA Security+
- Certified Ethical Hacker (CEH)
- CISSP (advantageous)
Reporting Line
Operational Reporting
Chief Digital & Technology Officer (CDTO)
Functional Reporting
Chief Information Security Officer (CISO)
Success Measures
Success in this role is measured by:
- Reduction in critical vulnerabilities
- Effective incident response
- Improved security monitoring coverage
- Strong cloud and endpoint security posture
- Timely remediation of security issues
- Successful audit and compliance outcomes
