Head of Microsoft Cloud and Security Operations (w/m/d)

Maltego

WHY WE NEED YOU The Security Engineering Manager owns Maltego’s operational security function and leads the team that protects our infrastructure, product, and corporate environment. This is a hands-on technical role combined with people leadership You will run detection and incident response, harden our multi-cloud and endpoint estate, embed security into engineering workflows, and build the practices and team that scale with the company. You act as the technical authority for operational security while partnering closely with Engineering, Corporate IT, and our Governance, Risk & Compliance (GRC) function. Reporting initially to the Head of Infrastructure & Operations, you set operational security direction independently and translate risk into concrete, prioritized action. Success in the first phase means a well-instrumented and measurable security posture, reliable incident response, and a team operating to clearly defined technical standards. WHAT TO EXPECT Key Responsibilities: * Own detection, triage, and resolution of security incidents across cloud, product, and corporate environments – ensuring fast, reliable response and continuously improving incident response playbooks and tooling (Microsoft Sentinel, Microsoft Defender). * Own operational security monitoring across the multi-cloud estate (Azure as primary, plus AWS and GCP), tuning detections, alerting, and response workflows for fast and reliable threat handling. * Drive vulnerability management end-to-end – coordinating scanning, prioritization, and remediation tracking with Nessus and Snyk in partnership with Engineering. * Define security baselines and secure-by-default standards, and embed them into the software development lifecycle and infrastructure, integrating tooling such as Snyk into engineering workflows. * Manage endpoint and identity security across Windows and macOS fleets using Microsoft Intune, Defender, and Purview, ensuring consistent hardening and data protection. * Build and lead the operational security team – line-managing and mentoring engineers, contractors, and working students toward clear technical and delivery standards. * Plan and deliver security awareness and enablement across the organization, including onboarding content and phishing simulations, translating risk into plain language for non-technical audiences. * Partner with the AI transformation team to engineer security guardrails and monitoring for the responsible use of AI across the organization. YOUR PROFILE IN SHORT Required Qualifications (Must Have) * 5+ years in security operations or security engineering, preferably in a SaaS or B2B software environment. * Experience owning security outcomes or domains end-to-end (not only contributing to them). * Hands-on incident detection and response experience, including SIEM (Microsoft Sentinel), EDR/XDR (Microsoft Defender), and cloud security monitoring. * Strong technical fluency across multi-cloud infrastructure (Azure primary; AWS and GCP) and endpoint/identity management (Microsoft Intune, Windows, macOS). * Experience with vulnerability management and developer security tooling such as Nessus and Snyk, including coordinating remediation with engineering teams. * Proven ability to define and embed security baselines and secure-default standards into engineering and infrastructure. * Proven people leadership experience, including setting expectations, developing engineers, and holding teams accountable for delivery and technical quality. * Clear communicator able to translate security risk into plain language for engineers and non-technical stakeholders. * Comfortable acting as the primary operational security practitioner, setting technical direction independently while collaborating with a separate GRC function. * Professional proficiency in English. Preferred Qualifications (Nice to Have) * Experience producing audit evidence for ISO 27001 / SOC 2 control operation and working with compliance automation platforms such as Vanta. * Experience with Microsoft Purview for data security, DLP, or information protection. * Relevant certifications such as CISSP, CISM, or Azure security certifications (e.g., AZ-500 / SC-200, SC-900), GIAC certification (GCIH, GCIA). * Experience in engineering security guardrails or monitoring for AI / LLM usage. * Experience in a scale-up or growth-stage company where security functions are being built rather than inherited. * Professional proficiency in German ABOUT THIS OPENING Team & Leadership This is a people-management position. You will begin by coordinating external contractors and working students, and are expected to lead a dedicated operational security team as Maltego scales – owning hiring, development, and performance for your direct reports while remaining hands-on technically.   Current Environment (you will shape and evolve this) Cloud: Azure (primary), AWS, GCP. Detection & response: Microsoft Sentinel (SIEM), Microsoft Defender (EDR/XDR). Data & endpoint: Microsoft Purview, Microsoft Intune, Windows and macOS. Application & vulnerability security: Snyk, Nessus. Compliance automation: Vanta. WHY YOU WILL LOVE MALTEGO Here are some of the reasons why you will love Maltego: * Insights into the daily operations of a fast-growing tech scale-up. * Competitive compensation with a bonus/commission structure based on pipeline creation. * Inclusive, diverse culture, where your voice and contributions matter. * Supported language courses  * Mental health support via .nilo (psychologists & digital tools) At Maltego, we are committed to supporting diversity and inclusion in our organization. We are an equal opportunity employer. We welcome applications from all individuals regardless of race, religion, color, nationality, gender, sexual orientation, age, or disability. LOCATION Our Munich office REQUIRED DOCUMENTS / INFORMATION Please submit a CV and cover letter detailing your experience and motivation for joining Maltego!

Triple Point

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit, Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.  There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work  2025 & 2026'. If this sounds like an environment where you would flourish, then read on… The Function  The Digital and Technology team designs, builds and maintains the systems that power Triple Point. The function enables seamless connectivity, security and innovation across the organisation, creating tools and platforms that help colleagues and partners work smarter and deliver excellent outcomes.  The Team  This role sits within Technical Operations & Cyber, within the wider Digital and Technology function. The role works closely with colleagues across D&T, our MSP, our SOC and stakeholders across the business. The team is responsible for keeping our technology secure, reliable and high performing while improving delivery pace through automation, cloud engineering and emerging technology.  The Role  We are seeking a Senior DevOps Engineer to lead hands-on DevOps and platform engineering across Triple Point’s Microsoft cloud and AI delivery landscape.  You will design, build and operate secure deployment pipelines, automation, monitoring and infrastructure-as-code patterns that enable cloud and AI workloads to move safely and at pace. As our use of Claude Code, AI agents and automation grows, this role will provide the engineering foundations to run these capabilities reliably, securely and with clear governance.  Working closely with the Head of Technical Operations & Cyber and our Senior Cyber Engineer, you will help enable pragmatic, risk-aware decisions on cloud and AI tooling, ensuring a balance between delivery pace and security, governance and operational sustainability.  This is a delivery-focused role owning engineering work end-to-end, from discovery and design through to implementation, documentation and transition into BAU. You will help remove delivery bottlenecks, strengthen platform maturity and make practical recommendations that balance pace, reliability, security and usability.  Key Responsibilities  DevOps, Cloud Platform & CI/CD Engineering  * Design, build, maintain and improve CI/CD pipelines for cloud, integration, automation and AI workloads.  * Create reusable infrastructure-as-code patterns, templates and standards for secure, consistent cloud deployments.  * Improve release management, environment management and deployment controls across development, test and production environments.  * Support source control, branching, build, test and deployment practices that help teams deliver safely and efficiently.  * Build practical engineering standards for service principals, managed identities, secrets, configuration, certificates and environment separation.    Automation, AI Enablement & Developer Experience  * Enable safe, reliable deployment and operation of Claude Code, AI agents and similar AI-assisted development tooling.  * Automate repeatable operational, deployment and monitoring tasks to reduce manual effort and improve consistency.  * Develop self-service patterns, reusable scripts and documentation that make it easier for colleagues to adopt approved engineering practices.  * Work with current and future AI Team colleagues to lay the technical foundations for agent automation and cloud-based AI delivery.  * Identify opportunities to simplify tooling, reduce friction and improve the developer and stakeholder experience.    Reliability, Monitoring & Operational Readiness  * Design and improve monitoring, logging, alerting and reporting across pipelines, platforms and cloud workloads.  * Create runbooks, deployment checklists and operational handover materials that support effective BAU ownership.  * Support incident response, root-cause analysis and continuous improvement for deployment or platform reliability issues.  * Improve resilience, recovery and performance practices for key services and automation workloads.  * Use data from monitoring and service performance to recommend improvements and prioritise platform work.    Security, Governance & Documentation  * Embed security-by-design into DevOps practices, including least privilege, secure configuration, secrets management and change control.  * Work closely with Technical Operations & Cyber, the SOC and MSP partners to ensure cloud and AI tooling is operated securely.  * Maintain clear documentation of pipeline designs, infrastructure standards, access models, monitoring arrangements and operational guardrails.  * Support audits, assurance activity and evidence gathering where DevOps, cloud or platform controls are in scope.  * Balance security, usability and delivery pace when assessing risks, trade-offs and recommendations.    Collaboration, Planning & Continuous Improvement  * Plan and prioritise DevOps improvements based on impact, value, risk and delivery needs.  * Translate technical complexity into clear recommendations for technical and non-technical stakeholders.  * Partner constructively across Digital and Technology, internal stakeholders and external technology partners.  * Challenge current ways of working where needed and recommend pragmatic improvements with clear rationale.  * Share knowledge generously and help raise DevOps capability across the function and organisation.    Knowledge & Experience  Essential  * Significant hands-on experience in DevOps, platform engineering, cloud engineering or a closely related engineering role.  * Strong experience designing and maintaining CI/CD pipelines using tools such as Azure DevOps, GitHub Actions, GitLab CI or equivalent.  * Good working knowledge of Microsoft Azure and Microsoft cloud services, including deployment, access, monitoring and governance considerations.  * Experience with infrastructure-as-code and automation tools such as Terraform, Bicep, ARM templates, PowerShell or equivalent.  * Proficiency in Python for scripting, automation and tooling able to write, read and maintain production-quality scripts, not just adapt examples.  * Working knowledge of core Azure networking concepts, including VNets, NSGs, DNS, private endpoints and load balancers, with practical experience applying these in cloud and containerised workloads.  * Strong understanding of Git, source control workflows, release management, environment management and secure software delivery practices.  * Experience implementing monitoring, logging and alerting for cloud platforms, pipelines or application workloads.  * Strong grounding in cloud security principles, including identity and access, least privilege, secrets management, network security and secure configuration.  * Awareness of cloud cost management principles, including resource tagging standards, right-sizing, and governance for spend able to recommend efficient, cost-conscious approaches rather than just functional ones.  * Ability to translate technical requirements and risk considerations into pragmatic, well-documented engineering solutions.  * Comfortable working with the Head of Technical Operations & Cyber to make pragmatic, risk-aware decisions that balance delivery pace with security and governance requirements.  * Excellent communication skills, with the ability to work effectively with technical teams, senior stakeholders and external partners.  * A self-starter mindset, with strong planning, problem-solving and ownership of delivery outcomes.    Desirable  AI & Automation  * Experience deploying, governing or operating AI-assisted development tools, agent automation or cloud-based AI workloads.  Microsoft Platform  * Experience working with Microsoft 365, Entra ID, Intune, Sentinel, Azure Monitor, Log Analytics or similar Microsoft tooling.  * Relevant certifications such as AZ-400, AZ-104, AZ-305, AZ-500, Terraform Associate, GitHub certifications or equivalent hands-on experience.  Containers & Orchestration  * Experience with containers and orchestration technologies such as Docker, Kubernetes or Azure Container Apps.  Broader Platform & Integrations  * Experience supporting Salesforce, data platform, integration or business automation workloads.  Regulated Environments  * Experience working in a regulated services environment, ideally FCA-regulated.  Why Join us?  This is a key role at the point where DevOps, cloud automation and AI capability are becoming central to how Triple Point delivers technology safely and effectively.  * You’ll join a talented, collaborative team in a connected environment where ideas and initiative are valued.  * Be part of a growing and innovative team.  * We offer a competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.  * Opportunities for professional development and career progression.  At Triple Point, high performance means living our values every day:  * Stay Curious.  * Be Generous.  * Take Thoughtful Action.  * Pull Together.  * Own It.  In line with our values Stay Curious and Take Thoughtful Action every employee has access to AI tools.  We see technology as a co-pilot, helping us improve efficiency and insight while keeping decisions grounded in thoughtful human judgement.  Triple Point offers a wealth of benefits including a contributory pension, hybrid/flexible working and ongoing learning and development opportunities. Check out our comprehensive list of benefits HERE.  Apply today for further information! Triple Point is dedicated to providing fair and equal opportunities for all individuals, including both current and potential employees. Discrimination of any kind based on factors such as age, disability, gender, sexual orientation, pregnancy, race, ethnicity, religion, gender identity, or marital status is not tolerated by the company. Our aim is to create a welcoming and diverse work environment where people from all walks of life feel valued and supported. We actively encourage individuals from various backgrounds to apply for job vacancies and become part of our team.  STRICTLY NO AGENCIES

GoFibre

HEAD OF IT OPERATIONS EDINBURGH HYBRID SALARY CIRCO £70,000   LEAD THE TECHNOLOGY THAT KEEPS GOFIBRE CONNECTED We're looking for an experienced Head of IT Operations to lead our IT Operations and Cyber Security functions, ensuring our technology estate is secure, reliable, scalable and ready to support our continued growth. The role is responsible for managing the team and the day-to-day performance of our infrastructure, cloud services, networks, cyber security, service management and end-user technology environments.  WHAT YOU'LL BE DOING * Leading IT Operations and Cyber Security across the business. * Driving the performance, availability and resilience of GoFibre's technology estate. * Delivering service excellence through strong SLA, KPI and service management practices. * Leading incident, problem and change management activities. * Ensuring cyber security controls remain effective and aligned to business needs. * Managing technology suppliers, partners and third-party services. * Developing and inspiring an experienced team * Driving continuous improvement and operational efficiency. * Supporting the delivery of GoFibre's wider technology strategy. WHAT WE'RE LOOKING FOR * Significant leadership experience within IT Operations, Infrastructure, Service Management or Technology Operations. * Strong knowledge of Microsoft 365, cloud services, networking, infrastructure and end-user computing. * Experience leading cyber security operations and managing technology risk. * A proven track record of improving service performance and operational maturity. * Experience managing major incidents, change management and service delivery. * Commercial awareness that enables a  supplier management experience. * Experience building, coaching and developing high-performing teams. * ITIL qualification or equivalent experience (desirable). WHY JOIN GOFIBRE? At GoFibre, we're proud of our values-driven culture and our mission to bring better broadband to communities across Scotland. In return, you'll get: * 31 days holiday including public holidays. * Hybrid working. * Enhanced pension scheme. * Life assurance. * Employee Assistance Programme. * Gym and Retail discounts. * Ongoing learning and development opportunities. * The opportunity to shape and lead a critical technology function. WHY CHOOSE GOFIBRE? * Make a genuine impact in one of Scotland's fastest-growing telecoms businesses. * Shape how technology services are delivered across the organisation. * Work with an ambitious and collaborative leadership team. * Lead transformation, drive improvements and influence strategic decisions. * Help connect communities and support Scotland's digital future. Ready to lead the technology that keeps GoFibre connected? Apply today.