Information Protection & Security Operations Engineer in Wrocław

Meet Unit4. With over 40 years of heritage, we’re an agile, fast growing, Cloud company that is on a mission to redefine Enterprise Resource Planning (ERP) for mid-market people-centric organisations. With our innovative, self-driving, adaptive and intuitive software, our customers can spend more time on meaningful high-value work. At the heart of what we do lies a simple yet profound purpose: Improve how people work by focusing on what truly matters.

The Information Protection & Security Operations Engineer is a hybrid role split roughly 50/50 between two disciplines. Half of your time is spent on information protection: managing and improving Microsoft Purview controls such as Data Loss Prevention (DLP), Insider Risk Management and related data protection policies, so that our customers' and our own sensitive data is protected without getting in the way of how people work. The other half is spent in Security Operations: deploying, configuring, monitoring and maintaining our security solutions, responding to incidents and ensuring vulnerabilities are identified and addressed.

Responsibilities:

• Information Protection (approx. 50%):
• Maintaining, designing, deploying and tuning Microsoft Purview Data Loss Prevention (DLP) policies across Exchange, SharePoint, OneDrive, Teams, endpoints and cloud apps.
• Configuring and operating Insider Risk Management, including policy templates, indicators, Adaptive Protection and case triage, in close collaboration with HR, Legal and Compliance.
• Implementing and maintaining information classification, including sensitivity labels, label policies, auto-labeling and encryption.
• Managing related protection policies such as retention and records management, communication compliance and Defender for Cloud Apps session and access policies.
• Monitoring DLP and Insider Risk alerts, investigating policy matches, reducing false positives and reporting on policy effectiveness and data protection posture.
• Defining and documenting information protection standards, processes and runbooks, and supporting audits and compliance requirements (e.g. ISO 27001, SOC 2, GDPR, NIS2).
• Driving user awareness and adoption, including policy tips, guidance and training for business teams.
• Security Operations (approx. 50%):
• Deploying and configuring security solutions such as intrusion detection systems, and endpoint protection.
• Monitoring security systems to identify and respond to security incidents, including triage of alerts in Microsoft Defender XDR and Microsoft Sentinel.
• Investigating security incidents and developing remediation plans.
• Conducting vulnerability assessments and coordinating remediation of findings with infrastructure and application teams.
• Developing and implementing security policies and procedures.
• Building and improving detection rules, automation and playbooks to reduce response times.
• Providing technical guidance and support to other IT professionals.

Wymagane umiejętności:

• Information Protection:
• Hands-on experience implementing and operating Microsoft Purview DLP and Insider Risk Management in a production environment.
• Practical knowledge of sensitivity labels, information classification, encryption and retention concepts.
• Understanding of data protection and privacy regulations and frameworks (e.g. GDPR, ISO 27001, NIS2) and how they translate into technical controls.
• Ability to balance security requirements with user productivity and to work sensitively with HR, Legal and Compliance on insider risk topics.
• Security Operations:
• Knowledge of security technologies such as firewalls, intrusion detection systems, and endpoint protection.
• Familiarity with networking and operating systems.
• Understanding of security principles and best practices.
• Experience with SIEM and XDR tooling, including KQL queries for investigation and detection.
• Ability to work under pressure and respond to security incidents quickly.
• Stay informed about current CVEs and emerging threats, with the ability to track, assess, and ensure coverage to safeguard the organization's security posture.
• Ogólne:
• Analytical and problem-solving skills.
• Effective communication and collaboration skills, with the ability to explain data protection and security topics to non-technical stakeholders.
• Discretion and sound judgement when handling confidential and sensitive information.

Wykształcenie:

A bachelor's degree in computer science, information technology, information security or a related field is typically required. Relevant certifications such as Microsoft SC-401 (Information Security Administrator), SC-200 (Security Operations Analyst), AZ-500, CompTIA Security+ or CISSP may also be beneficial.

We are a people-first community that nurtures all the areas that surround your working experience. With us, you’ll be surrounded by a high-performance team that supports your authentic self and celebrates your uniqueness. We believe that ‘How work should feel’ is an evolving statement. Work goes beyond tasks and everyday responsibilities it’s about feeling valued, empowered, promoted, impactful, seen, and appreciated.

Our commitment to equity: Unit4 is committed to ensuring equal opportunity for everyone. We make our hiring decisions solely based on skills, qualifications, and our current business needs. We know that diversity brings fresh perspectives, ideas, and solutions to our company. This is the essence of our culture.