Cybersecurity Engineer

About XTEL

XTEL is a leader in advanced, AI-driven solutions for consumer goods companies, combining cutting- edge technology, industry expertise, and data management to accelerate profitable revenue growth and value realization.

Position Overview

XTEL is hiring a Cybersecurity Engineer to strengthen XTEL’s security posture across our platform, applications, and Microsoft environment. You’ll join a growing Security & Compliance team that already maintains a mature compliance foundation (ISO 27001:2022, SOC 2 Type 2, SOC 1 Type 2, ISAE 3402) and an established GRC function, alongside a managed SOC, an IT team, and a Cloud Operations team.

This is a very hands-on role where you’ll lead vulnerability management, work with Engineering and Product to embed security into the SDLC, partner with IT & Cloud Operations to continuously harden our Microsoft environments, and drive triage and remediation of issues surfaced by our SOC. Because you’ll work alongside existing IT, Cloud Operations, and GRC capabilities, success depends on collaboration and influence as much as technical depth.

The ideal candidate must be proactive and self-directed: actively seeking out opportunities to improve security across the organization and able to operate effectively with limited guidance and oversight.

Key Responsibilities

• Vulnerability management. Own intake, triage, risk-based prioritization, remediation tracking, validation, SLAs, and reporting across our Azure environments (dev, test, prod, and customer-facing) and the development pipeline.

• Secure SDLC & CI/CD. Partner with Engineering, Product, and QA to continually improve secure development practices:

• Pipeline security and security gates in CI/CD.

• SAST, DAST, IAST, dependency/software composition (SCA), and code scanning.

• Secure code review practices, threat modeling, and security requirements in design.

• Microsoft environment hardening. Work continuously with IT to further secure infrastructure - identity and access management, endpoint protections, M365 controls, and configuration/hardening baselines.

• SOC-driven remediation. Coordinate and drive triage and remediation for alerts, incidents, and vulnerabilities reported by XTEL’s SOC, including root cause follow up.

• Penetration testing. Coordinate external penetration tests (scope, execution support, findings management, retesting and closure), and conduct internal testing.

• Patch management. Support patch management processes and verification in partnership with IT and Cloud Operations.

• Cloud security partnership. Partner with Cloud Operations on Azure security architecture, secure-by-design patterns, CSPM, secrets management, and network security.