IT Security Engineer

# One Group | One Power

ELPEDISON is the first independent energy utility in Greece, and a leader in providing outstanding and innovative energy solutions. We operate with enthusiasm in what we do and we pride ourselves of offering our employees a place where they can excel, creating value. We are offering now a set of exciting positions in our headquarters in Athens, to incite our new digital transformation program. If you are skilled in data management, data science, advanced analytics, technology project management, or related fields, this can be a big opportunity for YOUR career.

ELPEDISON, with its two privately-owned power plants in Thisvi (Voiotia) and Thessaloniki, with a total installed capacity of 820 MW, uses natural gas as fuel and ensures a clean and continuous electricity flow, based on a highly environmentally-friendly power generation process.

We are currently looking for an IT Security Engineer who is going to be responsible for monitoring, maintaining, configuring, and securing Elpedison's systems and applications. The role will address critical vulnerabilities and recommend solutions to mitigate security threats and risks. They will be collaborating with IT Security team to analyze the current information security posture and IT environment, implementing IT security controls and services, suggesting and performing system and configuration hardening, participating in remediation activities during security incidents, executing information security risk assessments, and monitoring security systems, IT portal, and tools to detect and respond to security incidents, threats, vulnerabilities, and risks.

What will you do:

• Be responsible for monitoring security systems, IT service desk portal and tools to detect and respond to security incidents, threats, vulnerabilities, and risks. Responsible for incident response activities to contain, investigate, and remediate security incidents, and ensure business continuity and regulatory compliance. Collects and analyzes threat intelligence, to proactively identify potential security threats and risks, and develop mitigation strategies.
• Collaborate with the IT Security Team to analyze the current information security posture and IT environment, identify critical vulnerabilities and participate in the remediation activities and solutions for improvement. Perform analysis and proactive management of business demand for new security services / implementations, or modifications to existing ones.
• Monitor and coordinate for implementation of IT security controls and services (such as IDS, IPS, WAF, DAM, SIEM, DLP, Next Generation Firewalls), based on risk assessments' output, to successfully mitigate identified vulnerabilities.
• Perform technical activities such as AV whitelisting, monitoring phish alert incidents.
• Participate in, investigate, review, and address vulnerability assessments and penetration tests.
• Work with IT and other departments to enhance employee safety and the company's security posture.
• Record completed tasks, processes, and procedures, and add them to the knowledge base.

What you need to be successful:

• An Associate or Bachelor's degree in Computer Science, Information Technology, System Administration or a closely related field or equivalent experience is required.
• Relevant master's degree will be considered as an advantage.
• 2-5 years of experience as an IT Security Analyst/Engineer (member of Security Operating Center)
• Desirable courses that will be considered as an asset: Microsoft Azure Security Engineer Associate (AZ-500), Microsoft (SC-200) Security Operations Analyst Associate, Microsoft 365 Mobility & Security (MS-101),Certified Ethical Hacker (CEH),CompTIA Security+.
• Familiarity with security policies, standards, and regulations (e.g., ISO 27001, PCI DSS).
• Knowledge of security frameworks (e.g., NIST Cybersecurity Framework, SANS).
• Experience with Microsoft 365 security tools such as Microsoft Purview, Microsoft Defender XDR (Defender for Endpoints, Defender for Office 365, Defender for Identity, Defender for Cloud Apps) and Microsoft Intune.
• Have experience with incident response.
• Expertise in security technologies (e.g., firewalls, intrusion detection systems, encryption).
• Experience in IT infrastructure (servers, switches, storage units) & virtualization (VMWare, Microsoft Azure).
• Excellent communication and interpersonal skills in order to collaborate effectively with cross-functional teams & stakeholders, translating business requirements into technical solutions.
• Problem-solving and analytical thinking skills.
• Effective prioritization, planning, and organization skills to manage multiple tasks and projects simultaneously and meet deadlines.
• Continuous learning and staying current with the latest security technologies, industry standards, and best practices.

Our offer to you:

• Competitive salary
• Performance-based variable pay
• Ticket restaurant card
• Transportation reimbursement
• Private Health Insurance coverage
• Pension Scheme
• Home electricity and natural gas discount
• Continuous learning & upskilling opportunities and access to our premium online training platform
• Hybrid Working
• One extra day of paid time off
• Reimbursement for your athletic activities
• Unlimited fruits and snacks at the office

Elpedison S.A. will keep your personal information for a period of 2 years from the submission date, after which we will delete your personal data. Elpedison S.A. has the right to transfer your personal information to third parties to whom it has assigned services, which require the collection and processing of such personal data for candidate evaluation in the process of personnel selection.

For more information regarding the processing of your personal information and exercising your rights, please read the Notice to Candidate Employees.