Cybersecurity Engineer

Overview

As part of Digital & Tech Cyber Security Unit we are seeking to recruit a motivated Cybersecurity Enginer specialized in collaboration security and email security to join the CyberSecurity Engineering team.

You’ll play a crucial role in designing, implementing, and managing security controls to protect our organization against email-based threats, phishing attacks, and other collaboration security risks. You will also contribute to the continuous enhancement of our security capabilities across IT, OT, and R&D environments.

Your Key Responsibilities

Collaboration Security

• Work on continuously improving Identity Security policies to move towards Zero Trust principle: Entra ID/Azure AD Conditional Access policies (phishing resistant MFA, authentication strengths, control access based on specific conditions, password less authentication,...)
• Enhance security of Microsoft Entra ID components such as Enterprise Applications, App Registrations
  
  

• Strengthen email security using Microsoft Defender for Office 365 (MDO) and ProofPoint
• Enforce and continously improve email security policies, controls, and best practices to mitigate phishing and other email threats (e.g.: advanced phishing detection, threat intelligence feeds, anomaly-based behavioural analysis,...)
• Work on improving security protocols like SPF and DMARC for all company-owned domains
  
  

Design and enhance PKI architecture to support secure identity, authentication, and encryption across enterprise systems

Collaborate with internal teams to define certificate lifecycle management processes (issuance, renewal, revocation)

Integrate PKI solutions with Microsoft Entra ID and other identity platforms for strong authentication

Ensure compliance with industry standards (e.g., X.509, RFC 5280) and internal security policies

Evaluate, design, and implement PKI automation solutions for certificate lifecycle management, leveraging ACME-like protocols to streamline issuance, renewal, and revocation processes

You Bring

• 10+ years of hands-on experience with email security gateways like Proofpoint or Microsoft Defender for O36
• Strong understanding of email security protocols like SPF and DMARC
• Strong knowledge of email security threats, phishing techniques, and mitigation strategies
• Strong understanding of PKI concepts, certificate authorities, and cryptographic standards
• Experience designing PKI solutions for hybrid and multi-cloud environments
• Ability to conduct security assessments and provide recommendations based on industry standards
• Experience working on hybrid infrastrucutres and multi cloud
• Scripting and automation skills (Python, PowerShell)
• Experience with Microsoft Azure cloud services and security frameworks
• Ability to work in an international environment with geographically distributed teams
  
  

• A team of diverse employees who aren’t afraid to think outside of the box.
• A truly global and collaborative team that cares about the experience of our employees.
• The encouragement you need to develop and achieve personal growth.
• A role that is crucial on projects and allows you to build your brand.
• A caring and supportive environment where you’re empowered to grow and share your ideas.
  
  

Interested in this position? Please apply on-line by uploading your resume in English via our internal career portal. For further information about the position, please contact Nisha Tiwari (Nisha.tiwari@dsm-firmenich.com).

Inclusion, Belonging And Equal Opportunity Statement

At dsm-firmenich, we believe being a force for good starts with the way we treat each other. When people feel supported, included, and free to be themselves, they do their best work – and that’s exactly the kind of culture we’re building. A place where opportunity is truly equal, authenticity is celebrated, and everyone has the chance to grow, contribute, and feel they belong.

We’re proud to be an equal opportunity employer, and we’re serious about making our hiring process as fair and inclusive as possible. From inclusive language and diverse interview panels to thoughtful sourcing, we’re committed to reflecting the world we serve.

We welcome candidates from all backgrounds — no matter your gender, ethnicity, sexual orientation, or anything else that makes you, you.

And if you have a disability or need any support through the application process, we’re here to help – just let us know what you need, and we’ll do everything we can to make it work.

Agency Statement

We’re managing this search directly at dsm-firmenich. If you’re applying as an individual, we’d love to hear from you. We’re not accepting agency submissions or proposals involving fees or commissions for this role.