Senior Technical Engineer

As a Senior Technical Engineer at H&M Group, you will implement, operate, and continuously improve security across enterprise-scale cloud and on-premises infrastructure.

You will work closely with engineering, operations, and Cyber Security teams to reduce risk and maintain secure, resilient platforms.

Key responsibilities:

• Implement and maintain security controls across Azure, GCP, and on-premises infrastructure in line with enterprise security standards and approved architecture.
• Assess security posture, identify misconfigurations, and drive remediation of vulnerabilities and control gaps with platform owners.
• Apply secure configuration baselines and system hardening across servers, virtualization, networks, storage, and backup platforms.
• Implement identity and access controls, including least privilege, role-based access, privileged access management, and periodic access reviews across cloud IAM, Microsoft Entra ID, and Active Directory.
• Configure and maintain endpoint and workload protection, security logging, and monitoring integrations with central security operations.
• Work with network teams to implement segmentation, firewall rules, and secure hybrid connectivity.
• Coordinate risk-based patching and vulnerability remediation, validate fixes, and track exceptions through the agreed risk process.
• Implement and maintain encryption, certificate, and secrets management controls across hybrid environments.
• Embed security checks into infrastructure provisioning and change processes; automate repeatable controls using Terraform and scripting.
• Support security assessments, audit evidence collection, and alignment with GDPR, SOC-related control requirements, ISO 27001, and ISO 27017.
• Investigate and triage findings from SCC, Microsoft Defender, and on-premises security tools; coordinate containment and remediation with Cyber Security and infrastructure teams.
• Support incident investigations, recovery exercises, and lessons-learned; maintain security runbooks and report on posture, remediation progress, and outstanding risks.

Requirements:

• 6-10 years of experience in information security or infrastructure security, including 3+ years in hands-on security engineering or specialist roles across cloud and on-premises environments.
• Strong practical experience securing Azure and/or GCP, with the ability to support security controls across both platforms.
• Datacenter knowledge is a must.
• Hands-on experience with Microsoft Defender, Google Security Command Center, and vulnerability assessment and remediation tooling.
• Strong knowledge of Windows and Linux security, Active Directory, virtualization, and data center infrastructure protection.
• Practical experience with cloud IAM, Microsoft Entra ID, privileged access management, and least-privilege controls.
• Working knowledge of network security, segmentation, firewalls, hybrid connectivity, encryption, certificates, and secrets management.
• Experience with security logging, SIEM integration, incident triage, and collaboration with security operations teams.
• Ability to automate security configurations and checks using Terraform, PowerShell, Python, or equivalent tools, and integrate controls into DevOps workflows.
• Practical understanding of GDPR, SOC-related controls, ISO 27001, and ISO 27017, including audit evidence and control validation.
• Experience working in agile, product-centric organisations and coordinating remediation across engineering, operations, and managed service providers.