Security Engineer (m/f/d)

Location: Colombo, Western Province, lk

Company Description

Variosystems develops and manufactures electronic solutions for industries where reliability is critical - including Medtech & Life Science, Industrial & Automation, Aerospace & Defence and Smart Infrastructure & Environment. As a long-term strategic partner to innovators and market leaders, we offer services along the entire value chain, from concept and engineering to validated assemblies and global production. Across our global network, more than 2,800 people work together to transform ideas into reliable electronic systems. 

Job Description

• Threat Monitoring & Incident Response - Continuously monitor systems for security breaches, suspicious activities, and vulnerabilities, and respond swiftly to incidents to minimize impact.
• Policy Enforcement & Access Control - Implement and maintain cybersecurity policies, ensure proper user access rights, and enforce secure authentication practices to protect sensitive data.
• Risk Assessment & Mitigation - Conduct regular security audits and risk assessments to identify weaknesses and recommend actionable improvements.
• Security Solution Management - Deploy, configure, and maintain protective technologies such as firewalls, antivirus software, intrusion detection systems, and encryption tools.
• Awareness & Compliance Training - Promote cyber awareness through user education and ensure that operations adhere to industry regulations and internal security standards. 

Qualifications

• Bachelor’s degree in information security, Computer Science, or a closely related discipline from a recognized university.
• 4-5 years of experience in IT Security or 3-4 years with relevant professional certifications.
• Strong understanding of cybersecurity principles, threat detection tools, and network security.
• Proficiency in leading security tools - including Palo Alto Networks, XDR, Sophos, Microsoft Defender, and Microsoft Sentinel is a mandatory requirement.
• Experience with SIEM, IDS/IPS, endpoint protection, and vulnerability management tools is required.
• Knowledge of regulatory standards and frameworks like ISO 27001, NIST, or GDPR.
• Excellent analytical skills, attention to detail, and ability to work under pressure. 

Additional Information

• Flat hierarchies, direct communication, and a backbone of integrity, courage, responsibility. 
• A fast-moving environment where momentum is not lost in approval loops. 
• Collaborate with colleagues and customers across countries, industries, and perspectives. 
• A workplace shaped by technology, curiosity, and continuous improvement. 
• Challenges with scale, depth, and enough complexity to keep you learning. 
• An attractive remuneration package.
• Company health benefits from day one.