Scope
We're looking for an Information Security Engineer to join the IT Security team within IT Corporate.
In this hands-on role, you'll drive operational cybersecurity: vulnerability management, security monitoring, incident response support, security assessments, and ongoing improvement of our controls. You'll work closely with Infrastructure and Workplace teams to strengthen our security posture and help execute the security roadmap.
EVS is an NIS2 Essential Entity under Belgian law, currently working toward ISO/IEC *****:**** certification (target: April ****). You'll play a direct role in this programme : implementing controls, producing evidence, and ensuring audit readiness across the IT Corporate perimeter.
Job Description
As part of the IT Security team, the Information Security Engineer will contribute to the following activities:
Security Operations & Monitoring
Monitor and investigate alerts across multiple platforms
Take part in incident response efforts and help coordinate investigations
Help refine and tune detection capabilities and monitoring use cases
Support the development and upkeep of operational procedures and playbooks
Conduct operational reviews and related follow-up work
Vulnerability & Exposure Management
Organize scanning activities and ensure findings are reviewed and prioritized appropriately
Liaise with infrastructure, platform, application and support teams on remediation actions
Track remediation progress and escalate overdue items when needed
Arrange external penetration tests and other assessments
Ensure findings from these engagements are documented, tracked, and resolved
Security Assessments & Risk Management
Assess applications, services and technical solutions from a security standpoint
Contribute to risk evaluations for new projects, technologies and providers
Examine configurations and flag areas for improvement
Help identify and manage risks across the IT environment
Security Governance & Reporting
Maintain and track operational KPIs and dashboards
Assist with reporting on vulnerabilities, incidents, posture and remediation efforts




Participate in periodic access reviews, including privileged accounts and controls
Support compliance efforts and implementation of requirements under ISO/IEC *****:**** and NIS2
Produce and maintain auditable evidence of control operation in line with ISO *****:**** (logs, reports, review records, remediation closure evidence)
Improvement & Automation
Spot opportunities to strengthen controls and streamline processes
Contribute to automation initiatives that reduce manual effort
Make use of available tooling — including built-in analytics and automation features — to enhance detection quality and efficiency
Keep documentation and procedures up to date
Collaboration & Advisory
Offer guidance to IT teams and project stakeholders
Partner with Infrastructure and Workplace teams to strengthen overall posture
Champion best practices and support awareness initiatives
Keep up with emerging threats, vulnerabilities and industry trends
Profile
Experience
Minimum 3 years in cybersecurity, security operations, vulnerability management, or a related technical security role
Background in security monitoring, incident handling, or vulnerability management
Practical exposure to security tools and operational processes
Technical Knowledge
Solid grasp of security monitoring and incident response principles
Knowledge of vulnerability management processes and risk-based remediation prioritization — combining CVSS scores with asset criticality, exploitability context, and compensating controls
Hands-on experience with the Microsoft Defender XDR suite: Defender for Endpoint (EDR), Defender for Office 365 / Exchange Online Protection, Defender for Identity




Exposure to Microsoft Sentinel (SIEM/SOAR) or an equivalent platform — deployment experience is a strong asset
Grasp of Entra ID governance: Conditional Access, Identity Protection, Privileged Identity Management (PIM)
Working knowledge of Microsoft Intune (MDM, endpoint compliance policies) and Microsoft Purview (DLP, compliance)
Command of network security fundamentals: firewall management (Palo Alto / FortiGate), log forwarding, network segmentation principles
Awareness of common frameworks and industry best practices (ISO/IEC *****, NIST CSF, CIS Controls)
Personal Skills
Strong analytical and problem-solving mindset
Organized, structured, and detail-oriented
Able to work independently while collaborating effectively across teams
Curious, with a drive to keep learning new technologies and trends
Proactive, with a continuous-improvement mindset
Strong communication and coordination abilities
Team player with a practical, solution-oriented approach
Languages
Fluent in French (working language of the IT team)
Professional English required — all security tooling, vendor documentation, and ISO/IEC ***** programme materials are in English
Certifications (Nice to Have)
SC-200 — Microsoft Security Operations Analyst (strongly preferred given the EVS tooling stack)
SC-300 — Microsoft Identity and Access Administrator
CompTIA Security+ or CySA+
ISO/IEC ***** Lead Implementer or Lead Auditor — a strong differentiator in the current certification programme context
Offer
Becoming part of the EVS team means receiving a competitive salary aligned with your skills and market standards, along with a wide range of wellness and healthcare benefits.
Our flexible schedules and hybrid working policies help support work–life balance. EVS also provides opportunities for career growth, internal mobility, and a broad range of training programs. You will join a friendly, lively, and inclusive environment that values motivation and ambition.
Visit our website to learn more about
why you should join EVS!

📌 Information Security Engineer (Italia)
🏢 Evs
📍 Italia