Description

We are growing! We are looking for a Security Operations Engineer who can work within a hybrid or a remote set-up. For this role, we are specifically looking for candidates based in Tunisia or Lebanon.

Who we are:

Founded in 2006, we’re proud to be a global business. From Shanghai to Paris, we have 12 offices and operate across four continents in 70 countries. We are home to over 250 professionals from around the world, working together to serve more than 230 luxury clients.

At CXG, we love to evolve, elevate, and transform experiences while bringing brand promises to life. We offer strategic solutions that impact performance and elevate the customer experience of some of the world’s most iconic premium and luxury brands.

What you will be doing:

The Security Operations Engineer is responsible for operating, maintaining, and improving the organization’s security controls across cloud and enterprise environments.

This role focuses on hands-on execution of security operations, ensuring that vulnerabilities are identified, security tools are effectively configured, and incidents are properly handled. The objective is to strengthen day-to-day security posture through structured processes, automation, and collaboration with engineering and IT teams.

Your duties will also involve:

Security monitoring & operations
Monitor security alerts and investigate potential threats
Operate and maintain security tools and platforms
Support incident detection, analysis, and response activities
Ensure proper logging, alerting, and escalation mechanisms are in place

Vulnerability management & VAPT
Run regular vulnerability scans using appropriate tools
Support coordination of periodic penetration testing (e.g., quarterly or risk-based)
Track vulnerabilities and ensure remediation follow-up
Assist in validating fixes and reducing exposure over time

Application security
Run and maintain automated security testing tools (SAST, DAST, dependency scanning)
Integrate security checks into development workflows
Support developers in identifying and fixing vulnerabilities
Contribute to improving secure development practices
Automation-first approach. Manual intervention when necessary.

Cloud, network & infrastructure security
Support implementation and validation of security configurations in cloud environments
Assist in reviewing identity and access controls
Contribute to securing network configurations, firewall rules, and application protection mechanisms
Support enforcement of encryption, logging, and monitoring standards

Microsoft 365 & endpoint security leadership
Operate and maintain enterprise security tools (e.g., Defender, endpoint/device management solutions)
Monitor alerts and contribute to improving configurations
Support identity protection and access control policies
Assist in ensuring secure collaboration and data sharing

Third-party & vendor security governance
Support security assessments of vendors and SaaS tools
Assist in completing security questionnaires from clients and partners
Contribute to tracking third-party security risks

Tool & AI security governance
Support security reviews of new tools and technologies
Assist in evaluating risks related to AI-based solutions
Ensure basic security requirements are considered during tool adoption

Incident preparedness & response
Participate in security incident handling and investigations
Document incidents and contribute to corrective actions
Support implementation of preventive measures

Awareness, adoption & continuous improvement
Contribute to promoting security awareness across teams
Support internal guidance on secure practices
Continuously improve processes, tools, and controls
Stay updated on emerging threats and security practices

Requirements

What you will bring along:

• Minimum 3 years of progressive experience in cybersecurity, cloud security, or security operations roles
• Experience operating security tools in cloud or SaaS environments
• Experience in SaaS or product-based technology companies preferred
• Practical experience with vulnerability management and security testing tools
• Experience working with enterprise security platforms and identity protection systems
• Exposure to vendor security assessments and client security requirements
• Familiarity with ISO 27001 or similar

Technical skills

• Good understanding of cloud security principles and configurations
• Solid knowledge of network security, firewall concepts, and application protection
• Experience with automated security testing tools and vulnerability scanning
• Understanding of common application security risks
• Familiarity with identity and access management concepts
• Ability to analyze security alerts and investigate issues
• Basic understanding of securing third-party and SaaS tools

Soft skills

• Hands-on and execution-oriented mindset
• Structured and methodical approach to problem-solving
• Ability to collaborate effectively with engineering and IT teams
• Clear communication of technical issues
• Ability to prioritize and manage multiple tasks
• Continuous learning and improvement mindset