# Senior Technical Engineer

**Company**: H&M Group
**Location**: Bangalore, Karnataka
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Retail

**Apply**: https://jobs.smartrecruiters.com/HMGroup/744000161258384-senior-technical-engineer?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-technical-engineer-8555a27e-7d5/

## Description

As a Senior Technical Engineer at H&M Group, you will implement, operate, and continuously improve security across enterprise-scale cloud and on-premises infrastructure.

You will work closely with engineering, operations, and Cyber Security teams to reduce risk and maintain secure, resilient platforms.

Key responsibilities:

- Implement and maintain security controls across Azure, GCP, and on-premises infrastructure in line with enterprise security standards and approved architecture.

- Assess security posture, identify misconfigurations, and drive remediation of vulnerabilities and control gaps with platform owners.

- Apply secure configuration baselines and system hardening across servers, virtualization, networks, storage, and backup platforms.

- Implement identity and access controls, including least privilege, role-based access, privileged access management, and periodic access reviews across cloud IAM, Microsoft Entra ID, and Active Directory.

- Configure and maintain endpoint and workload protection, security logging, and monitoring integrations with central security operations.

- Work with network teams to implement segmentation, firewall rules, and secure hybrid connectivity.

- Coordinate risk-based patching and vulnerability remediation, validate fixes, and track exceptions through the agreed risk process.

- Implement and maintain encryption, certificate, and secrets management controls across hybrid environments.

- Embed security checks into infrastructure provisioning and change processes; automate repeatable controls using Terraform and scripting.

- Support security assessments, audit evidence collection, and alignment with GDPR, SOC-related control requirements, ISO 27001, and ISO 27017.

- Investigate and triage findings from SCC, Microsoft Defender, and on-premises security tools; coordinate containment and remediation with Cyber Security and infrastructure teams.

- Support incident investigations, recovery exercises, and lessons-learned; maintain security runbooks and report on posture, remediation progress, and outstanding risks.

Requirements:

- 6-10 years of experience in information security or infrastructure security, including 3+ years in hands-on security engineering or specialist roles across cloud and on-premises environments.

- Strong practical experience securing Azure and/or GCP, with the ability to support security controls across both platforms.

- Datacenter knowledge is a must.

- Hands-on experience with Microsoft Defender, Google Security Command Center, and vulnerability assessment and remediation tooling.

- Strong knowledge of Windows and Linux security, Active Directory, virtualization, and data center infrastructure protection.

- Practical experience with cloud IAM, Microsoft Entra ID, privileged access management, and least-privilege controls.

- Working knowledge of network security, segmentation, firewalls, hybrid connectivity, encryption, certificates, and secrets management.

- Experience with security logging, SIEM integration, incident triage, and collaboration with security operations teams.

- Ability to automate security configurations and checks using Terraform, PowerShell, Python, or equivalent tools, and integrate controls into DevOps workflows.

- Practical understanding of GDPR, SOC-related controls, ISO 27001, and ISO 27017, including audit evidence and control validation.

- Experience working in agile, product-centric organisations and coordinating remediation across engineering, operations, and managed service providers.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Azure
- Google Cloud (GCP)
- Microsoft Defender
- Google Security Command Center (SCC)
- Terraform
- PowerShell
- Python
- Windows security
- Linux security
- Active Directory
- virtualization
- data center infrastructure protection
- cloud IAM
- Microsoft Entra ID
- privileged access management
- least-privilege controls
- network security
- segmentation
- firewalls
- hybrid connectivity
- encryption
- certificates
- secrets management
- security logging
- SIEM integration
- incident triage

---

Source: [Apply at jobs.smartrecruiters.com](https://jobs.smartrecruiters.com/HMGroup/744000161258384-senior-technical-engineer?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)