Cyber Security Engineer (m/f/d)

TYTAN Technologies The PACE is fast. The expectations are high. The contribution matters. Working at TYTAN is more than a job, this is a mission. We push boundaries, think big, and hold ourselves to the highest standard. Our mission and values guide everything we do, and we're looking for people who are driven by ownership, embrace challenges, and are energized by meaningful work. If you're motivated by impact and thrive in dynamic environments, you'll fit right in. At TYTAN , we aim to set a global standard in autonomous air defense with AI-driven, cost-efficient systems that counter unmanned aerial threats at scale. We protect people. We protect critical infrastructure. We protect European sovereignty. We are looking for a hands-on engineer who knows the Microsoft security stack in depth. You secure our endpoints and identities, own detection and incident response, and run our vulnerability management. Today much of this runs with external partners: in 2027 you take it over and keep us ready for ISO 27001 and NIS2. Your roadmap to make an impact Harden endpoints and identities Tune Microsoft Defender XDR across endpoints, mail, identities and cloud apps Maintain Intune security baselines: BitLocker, LAPS, attack surface reduction and device compliance Review and test Conditional Access, MFA and Privileged Identity Management with the Infrastructure & Cloud Lead Help apply Microsoft Purview data protection, such as sensitivity labels and data loss prevention Detect and respond Take over detection tuning and ownership from our managed SOC step by step in 2027 Connect logs to Microsoft Sentinel and build and tune detection rules Steer our managed SOC and SOAR service: alert quality, escalations and service reviews Lead incident response in-house and write runbooks the team can follow Manage vulnerabilities Run vulnerability management across endpoints, servers, cloud and network devices Prioritise findings by risk and drive fixes with the owning teams Publish a monthly vulnerability report with trends and open risks Secure production and engineering Support security of shop-floor, lab and test-bench networks with the Infrastructure & Cloud Lead Work with our Information Security Officers on secure CI/CD and supply-chain checks Stay audit-ready Prepare the technical side of ISO 27001 certification and NIS2 Provide technical evidence and put our security policies into practice Document systems, detections and runbooks so the team can rely on them 4+ years of hands-on security engineering in a Microsoft environment: Defender XDR, Entra ID and Intune Proven deployment and tuning of Microsoft Defender XDR (Endpoint, Office 365, Identity) in a live tenant Hands-on with Microsoft Sentinel or another SIEM: log onboarding, detection rules and alert tuning Real incident response experience, from triage to lessons learned, and runbooks others can follow You have run vulnerability management in a live environment: scanning, prioritisation, remediation and reporting Endpoint hardening with Intune: security baselines, BitLocker, LAPS and attack surface reduction rules Solid knowledge of Conditional Access, MFA and privileged access in Entra ID Scripting and security automation with PowerShell and Microsoft Graph Experience working with a managed SOC or external partners, and with ISO 27001 or NIS2 audits Fluent English; fluent in German is close to a must Based in Munich or willing to relocate Eligible to work in the German defense sector: you sign confidentiality and export-control obligations and pass a security check Nice to have Certifications such as SC-200, SC-100, AZ-500, SC-300 or GCIH Strong KQL for threat hunting and detection engineering Microsoft Purview: sensitivity labels, data loss prevention and insider risk OT security awareness, for example IEC 62443 Purple teaming or attack simulation experience Germ