Cybersecurity Technician

This is a remote position.

Location: Remote
Engagement Type: Project-Based Assignment | B2B Contract
Duration: 6 months, with possible extension
Timezone: CET ±3 hours

One of our clients is looking for an experienced Cybersecurity Technician to support and strengthen its cybersecurity environment, with a particular focus on Microsoft security platforms, Identity and Access Management (IAM), privileged access management, security operations, and incident response.

The ideal candidate will be responsible for securing Microsoft environments, implementing security controls, improving the organization’s security posture, and supporting digital forensic investigations and incident response activities. You will collaborate with various technical teams to maintain secure and reliable IT environments.

Key Responsibilities

Identity, Access Management, and Microsoft Platform

• Manage and secure Microsoft 365 and Microsoft Entra ID environments, including identities, access controls, privileged roles, applications, audit logs, and security configurations.
  
• Design, implement, and maintain security policies covering Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and the least privilege model.
  
• Secure and monitor hybrid identity environments, including Active Directory and Microsoft Entra ID, ensuring appropriate access controls and secure synchronization.
  
• Strengthen privileged account security through hardening measures, periodic access reviews, and monitoring of privilege-related risks.
  

Cybersecurity and Security Posture Improvement

• Participate in cybersecurity initiatives, including the implementation and enhancement of Privileged Access Management (PAM) solutions.
  
• Identify security improvement opportunities and recommend initiatives based on risk and operational impact.
  
• Automate operational tasks and security controls using PowerShell, Bash, and, where applicable, Ansible.
  
• Support the implementation and monitoring of security hardening measures and technical security controls.
  

Security Operations, Incident Response, and DFIR

• Analyze and manage security alerts and participate in the coordination and response to cybersecurity incidents.
  
• Conduct Digital Forensics and Incident Response (DFIR) investigations across Windows and Linux servers and endpoints, including the acquisition, preservation, and analysis of digital evidence.
  
• Prepare technical incident reports documenting evidence, findings, and mitigation recommendations.
  
• Collaborate with infrastructure, systems, networking, and IT support teams to resolve security incidents and maintain the protection and continuity of critical services.
  

Requirements

Ideal Profile

• 5+ years of relevant experience in cybersecurity, information security, identity and access management, or a similar technical role.
  
• Proven experience administering and securing Microsoft 365 and Microsoft Entra ID environments.
  
• Hands-on experience with Identity and Access Management, particularly Conditional Access, MFA, PIM, and Microsoft Entra ID roles.
  
• Knowledge of Privileged Access Management (PAM) solutions or equivalent technologies.
  
• Experience with security automation using PowerShell and/or Bash.
  
• Experience analysing security alerts and supporting incident response activities.
  
• Good knowledge of Windows Server and Linux, particularly in system hardening, security event analysis, and incident response.
  
• Ability to work independently, prioritise activities based on risk, and collaborate with multiple technical teams.
  
• Strong analytical, problem-solving, documentation, and communication skills.
  

Desirable Qualifications and Experience

• Experience in Digital Forensics and Incident Response (DFIR), including evidence acquisition and preservation, Windows/Linux artifact analysis, and incident investigations.
  
• Experience deploying or operating Privileged Access Management (PAM) platforms.
  
• Knowledge of Ansible and security control automation.
  
• Experience working in high-availability environments with restricted maintenance windows.
  
• Knowledge of GDPR and information security principles.
  
• Relevant certifications such as Microsoft SC-300, AZ-500, SC-200, MS-102, CompTIA Security+, CySA+, or equivalent cybersecurity, incident response, or DFIR certifications.
  
• Familiarity with SIEM and EDR technologies, including the development of incident response procedures and playbooks.
  
• Good technical English proficiency.
  

Why Partner with Us?

• Clear project scope and defined deliverables.
  
• Remote working arrangement with a project-based B2B engagement.
  
• Opportunity for repeat engagements based on performance and project requirements.
  
• Access to professional network insights and ongoing business support.
  

Selection Process

1. Proposal Submission

Submit your professional profile or CV by applying for the role.

2. Business Alignment Call

Attend a 30-minute virtual discussion with a Human Capital Consultant to review your experience, project scope, and engagement expectations.

3. Verification

Complete the Castille Vetting process, including applicable background and compliance checks.

4. Client Skills Review

• Attend a direct interview with the end client to discuss project requirements and relevant experience.
  
• Complete a project-specific technical assessment, if required.
  

Ongoing Business Support

Access professional guidance, network connections, and relevant market insights to support your ongoing engagement with Castille.