At Quento Technologies S.A., the ICT arm of the Qualco Group, we deliver comprehensive and innovative solutions across AI, Digital Engineering, Cloud, and Cybersecurity, helping businesses accelerate digital transformation. With a presence in Greece, Luxembourg, and Belgium, and backed by the expertise of the Qualco Group, we combine deep technical knowledge with strategic partnerships to support business growth.
At Quento Technologies S.A. we empower our people to innovate and lead in delivering transformative ICT solutions to our clients worldwide.
Quento Technologies S.A. seeks a highly motivated and experienced a Cloud Security & Identity Engineer to join our Managed Security Services team, supporting endpoint security, cloud security posture, and identity & access operations for enterprise Customers — with immediate deployment onto a strategic Customer engagement and onward deployment across Quento's Managed Security Services portfolio.
Your responsibilities will entail:
Endpoint security (primary) : Microsoft Defender for Endpoint operations (onboarding, ASR, TVM, alert triage handoff to SOC), disk encryption operations (BitLocker/FileVault), removable-media policy enforcement;
Cloud security fundamentals : Microsoft Defender for Cloud posture management, secure-score improvements at the workload/subscription level, security recommendations triage;
Identity operations : Entra ID day-to-day admin, MFA / passwordless operations (TAP issuance, FIDO2 enrolment, MFA reset workflows), Conditional Access authoring & change management, PIM elevation reviews;
Privileged access : PAM endpoint-safes operations (account onboarding, session recording review, break-glass), LAPS rotation for endpoint local admin;
Compliance & DLP : Intune compliance policy authoring, Purview endpoint DLP rules, exclusion register management;
Knowledge transfer & onboarding : actively participate in Customer KT workshops and shadow the incumbent for security and identity sub-services; capture undocumented procedures and workflows; produce daily notes;
Security incident support : serve as first escalation for endpoint isolation events; coordinate with SOC on active incidents; contribute post-incident forensic evidence;
Audit & compliance support : produce evidence for GDPR/EUDPR and ISO 27001 audits; maintain security control matrix currency;
Multi-client readiness : build reusable Quento security playbooks; support new Customer onboarding for managed security engagements;
Ensuring that all activities and duties are carried out in full compliance with regulatory requirements and supporting the continued implementation of the Group Anti-Bribery and Corruption Policy.
Requirements
University degree in Computer Science, Engineering, or a related field;
3–5 years of experience in cloud/endpoint security or identity operations at enterprise scale.
Experience supporting enterprise Customers in a managed-services or multi-client environment.
Experience troubleshooting security and identity incidents in production environments.
Experience working within ITSM ticketing and change management processes.
Strong analytical, troubleshooting, and communication skills.
Fluent English (B2 minimum) — non-negotiable given Customer-facing interaction.
Technical Knowledge
Microsoft Defender for Endpoint — onboarding, ASR rules, TVM triage, EDR block-mode, alert investigation;
Entra ID / Azure AD — Conditional Access authoring, MFA/passwordless, PIM, group-based licensing, identity protection;
Microsoft Defender for Cloud basics — secure score, recommendations, regulatory compliance dashboards;
Privileged Access Management — PAM tool operations (e.g. CyberArk, BeyondTrust, Delinea), safes management, session recording review;
Compliance & DLP — Microsoft Purview endpoint DLP, sensitivity labels at endpoint, Intune compliance policies;
PowerShell and Microsoft Graph for identity/security automation;
SIEM concepts (Microsoft Sentinel preferred) — enough to interpret alerts and…