CLOUD SECURITY ENGINEER

Lisbon, PRT Oporto, PT; Flexible; Hybrid Permanent Full Time 37.5 - 40 130713 TUI Group is the world’s number one integrated tourism business. Security is a global team within TUI technology responsible for security architecture across the organisation. We are a multi-disciplinary team of experts across Architecture, Engineering, DevOps and Agile Delivery providing services across the UK, Ireland, Sweden, Norway, Denmark, Finland, Germany, Belgium and The Netherlands. At TUI we’re ambitious to become the leader in technology within the travel industry and to achieve this we are looking to build a capable, creative team who want to be a part of accomplishing that goal. We never stop looking ahead, seeking new ways to delight our customers and grow our business. We recognise the power of digital and the massive contribution this brings to creating a truly unique and differentiated customer experience. We are looking for a talented and dedicated technical enthusiast to join the recently-formed Security Engineering technology organisation which drives application and infrastructure security good practice across TUI. The Cloud Security Engineer is a practitioner and advocate of modern identity and security practices within Microsoft 365 environments. Working in a supportive team environment and developing expertise in cloud security, the Cloud Security Engineer demonstrates enthusiasm for continuous learning while contributing to enterprise-wide security initiatives. With guidance from experienced security architects, they help shape and implement protection measures that safeguard our global organisation. Now taking applications until 20-01-2025 ABOUT OUR OFFER Personal benefits: Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support, and more. Flexible working: Work is something you do, not somewhere you go. We encourage a healthy work-life balance and offer hybrid or remote working models. A career to shape: Opportunities to upskill, reskill and grow your career. Access the TUI Tech Learning Hub to level-up and reach your ambitions. Expand your horizons: Participate in our tech communities and collaborate on global projects and teams. Community: Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community. ABOUT THE JOB As a Cloud Security Engineer, you will be part of a global security team that enables and enhances Microsoft 365 security capabilities across TUI’s 70,000-user environment. Being security-minded with a strong focus on identity and access management, you'll use your collaborative approach to work within our security teams to deliver robust protection for our organisation. You will work alongside experienced security architects to shape security processes and practices, promote a security-first ethos, and champion continuous improvement in our cloud security posture. You will contribute to the implementation of security solutions and will work alongside our Security Operations team to ensure appropriate controls are engineered, addressing the technical requirements of our global business. With your team, you will support the implementation and maintenance of identity protection, threat detection, and email security solutions across our Microsoft 365 environment. You will use your technical skills to work with colleagues on enhancing our security architecture, focusing particularly on multi-factor authentication, conditional access policies, and security automation through PowerShell. To achieve this, you will develop understanding of our security standards, Microsoft 365 security technologies, and automation practices to create consistent and reliable security configurations. You will need to ensure that security implementations align with our enterprise standards. Occasionally you may participate in security incident response with senior oversight, supporting the continuous improvement of our security posture. You have experience in Microsoft 365 administration and cloud security, with a focus on identity management and security operations. Your background includes supporting enterprise-scale security implementations, with particular emphasis on Entra ID security features, Microsoft 365 Defender, and email security protocols. You are able to articulate security concepts clearly and collaborate effectively with technical and non-technical stakeholders. Together with our security architecture team, operations teams, and broader IT functions, you will evaluate and implement security controls and help teams adopt them effectively. You will have opportunities to contribute to our security community of practice, with strong support from senior architects and team leads. You thrive in a supportive, learning-focused environment. You understand the importance of asking questions and seeking guidance while developing your expertise. You demonstrate enthusiasm for expanding your security knowledge and keeping current with cloud security developments. Our structured mentorship programme and protected learning time will support your growth in areas such as security architecture, automation development, and technical team leadership. Security is fundamental to everything we do at TUI. You will join an environment where secure practices are embedded in our culture and where you will receive comprehensive support to develop your security expertise. ABOUT YOU Essential Technical Skills Demonstrable experience in Microsoft 365 security administration Knowledge of Entra ID security features and configurations. Experience with PowerShell scripting for security automation. Understanding of Microsoft 365 Defender console operations. Basic proficiency in email security protocols. Experience working in large-scale environments. Essential Experience Strong experience in cloud security. Background in identity and access management. Understanding of security automation principles. Experience working within technical teams. Desirable Technical Experience Microsoft Security Operations Analyst (SC-200) certification or equivalent experience. Microsoft Identity and Access Administrator (SC-300) certification or equivalent experience. Experience with Conditional Access policy implementation. Knowledge of security logging and monitoring tools. Familiarity with Infrastructure as Code principles. Personal Qualities Strong analytical and problem-solving abilities. Clear communication skills with technical and non-technical audiences. Ability to maintain clear technical documentation. Enthusiasm for learning and professional development. Collaborative approach to teamwork. Proactive attitude towards identifying and resolving security issues. Development Mindset Willingness to learn from senior team members. Interest in security architecture and design. Enthusiasm for automation and process improvement. Commitment to security best practices. Open to constructive feedback and continuous learning. From a workplace to a place to belong. At TUI we embrace diversity, equity, and inclusion, encouraging everyone to come as you are, because together, our potential is limitless. We are committed to supporting candidates with disabilities and impairments so if you require any support, please do let us know.