Security Operations

• We are growing! We are looking for a **Security Operations Engineer** who can work with in a hybrid or a remote set-up. For this role, we are specifically looking for candidates based in Tunisia or Lebanon.
• **Who we are:**
• Founded in 2006, we’re proud to be a global business. From Shanghai to Paris, we have 12 offices and operate across four continents in 70 countries. We are home to over 250 professionals from around the world, working together to serve more than 230 luxury clients.
• At CXG, we love to evolve, elevate, and transform experiences while bringing brand promises to life. We offer strategic solutions that impact performance and elevate the customer experience of some of the world’s most iconic premium and luxury brands.
• **What you will be doing:**
• The **Security Operations Engineer** is responsible for operating, maintaining, and improving the organization’s security controls across cloud and enterprise environments.
• This role focuses on hands-on execution of security operations, ensuring that vulnerabilities are identified, security tools are effectively configured, and incidents are properly handled. The objective is to strengthen day-to-day security posture through structured processes, automation, and collaboration with engineering and IT teams.
• __**Your duties will also involve: **__
• **Security Monitoring & Operations**
• - Monitor security alerts and investigate potential threats
• - Operate and maintain security tools and platforms
• - Support incident detection, analysis, and response activities
• - Ensure proper logging, alerting, and escalation mechanisms are in place
• **Vulnerability Management & VAPT**
• - Run regular vulnerability scans using appropriate tools
• - Support coordination of periodic penetration testing (e.g., quarterly or risk-based)
• - Track vulnerabilities and ensure remediation follow-up
• - Assist in validating fixes and reducing exposure over time
• **Application Security**
• - Run and maintain automated security testing tools (SAST, DAST, dependency scanning)
• - Integrate security checks into development workflows
• - Support developers in identifying and fixing vulnerabilities
• - Contribute to improving secure development practices
• - Automation-first approach. Manual intervention when necessary.
• **Cloud, Network & Infrastructure Security**
• - Support implementation and validation of security configurations in cloud environments
• - Assist in reviewing identity and access controls
• - Contribute to securing network configurations, firewall rules, and application protection mechanisms
• - Support enforcement of encryption, logging, and monitoring standards
• **Microsoft 365 & Endpoint Security Leadership**
• - Operate and maintain enterprise security tools (e.g., Defender, endpoint/device management solutions)
• - Monitor alerts and contribute to improving configurations
• - Support identity protection and access control policies
• - Assist in ensuring secure collaboration and data sharing
• **Third-Party & Vendor Security Governance**
• - Support security assessments of vendors and SaaS tools
• - Assist in completing security questionnaires from clients and partners
• - Contribute to tracking third-party security risks
• **Tool & AI Security Governance**
• - Support security reviews of new tools and technologies
• - Assist in evaluating risks related to AI-based solutions
• - Ensure basic security requirements are considered during tool adoption
• **Incident Preparedness & Response**
• - Participate in security incident handling and investigations
• - Document incidents and contribute to corrective actions
• - Support implementation of preventive measures
• **Awareness, Adoption & Continuous Improvement**
• - Contribute to promoting security awareness across teams
• - Support internal guidance on secure practices
• - Continuously improve processes, tools, and controls
• - Stay updated on emerging threats and security practices

Security Operations Engineer

Digital Marketing

• Own the Japan growth strategy for Evaluator acquisition, aligned with profile needs and country targets.
• Localize global playbooks for Japanese platforms, culture, and applicable guidelines, in collaboration with relevant stakeholders.
• Identify, prioritize, and test new channels (campus programs, communities, influencers, niche platforms).
• Design and run multi-channel acquisition campaigns (online, offline, social, partnerships).
• Lead social recruiting on LINE, Instagram, TikTok and other relevant local platforms.
• Build and manage university, travel, and auto community programs to source qualified Evaluators.
• Implement direct recruitment campaigns and processes with full autonomy to design and execute strategies.
• Own performance and budget across channels, optimizing for volume, quality, and cost per qualified lead.
• Own the acquisition funnel from first touch to qualified Evaluator.
• Diagnose drop-offs in the funnel and partner with Operations and Growth & Engagement teams to adjust targeting, messaging, and incentives.
• Run structured A/B tests (audiences, creatives, offers, sequencing, timing) to improve sign-up and qualification rates.
• Build and maintain clear, simple processes so the funnel can be scaled.
• Define, track, and report on core acquisition KPIs
• Maintain dashboards and campaign reports; turn data into concrete next steps, not just slides.
• Use CRM/marketing tools (Clay, HubSpot, etc.) to structure outreach lists, automations, and follow-ups.
• Build repeatable playbooks and documentation so Japan can scale beyond a single operator.
• Partner closely with the Operations team to ensure a smooth handover from qualified Evaluator to first mission.
• Share funnel insights with Operations (profile quality, channel differences, expectations) to help them optimize activation.
• Develop and execute targeted communication to nurture potential Evaluators through qualification (email, messaging, content).
• Write clear, concise marketing and recruiting materials in English and Japanese.
• Take ownership of projects end-to-end, managing multiple initiatives and stakeholders at once.

Growth & Digital Marketing Specialist, Fluent Japanese Speaker

Operations

• Recruit, train and certify a sufficient and adequate number of active Evaluators from our internal database for specific projects (by emails/phone calls)
• Manage the timely assignment and execution of the missions as per company standards, specific client requirements and project schedule/deadline.
• Coordinate and report project status to the Operations Manager or the Operations Team Lead.

Freelance Operations and Community Associate

Frontend Engineer

• Choose your assignments - align your missions with your personal preferences and profile.
• Visit luxury stores or evaluate online - engage with sales associates in the stores or online from the comfort of your home.
• Observe carefully - check the ambiance, service quality, and overall customer experience.
• Provide honest feedback - use our platform to share your observations through questionnaires.

Luxury Brand Evaluator

Translator

• Proofread the surveys submitted by the evaluators: correction of the typo mistakes and the inconsistencies
• Make sure each comment is detailed enough to explain each ticked answer
• Be responsible of the quality delivered, making sure it is aligned with the Company’s standards before the surveys are published to the client
• Ensure the timely validation of the surveys
• Get in touch with the evaluators or Operation Executives for additional information
• Translate from English to Polish in an hourly rate.

Polish Validator, Translator Freelancer

Security Engineer

• **What you will be doing:**
• The Security Engineering Lead owns and continuously improves the organization’s security posture across cloud platforms, enterprise systems, applications, AI solutions, and third-party services.
• This is a hands-on leadership role combining governance, engineering validation, automation, and client-facing security representation. Security must be embedded into architecture, development workflows, AI adoption, and operational practices in a scalable and structured way.
• **Your duties will also involve:**
• Key Responsibilities1. Security Governance & Risk
• - Own and maintain the ISMS aligned with ISO 27001
• - Manage risk assessment frameworks, policies, and security KPIs
• - Ensure alignment with client security requirements
• - Drive continuous maturity improvement
• 2. Vulnerability Management & Testing
• - Operate a structured vulnerability management program
• - Conduct internal scans and coordinate external penetration testing
• - Validate remediation and track resolution progress
• - Provide structured reporting on risk posture
• 3. Application & DevSecOps Security
• - Define secure coding standards and security gates
• - Implement SAST, DAST, and dependency scanning
• - Integrate security into CI/CD pipelines
• - Review high-risk features and validate remediation
• Automation-first approach, with targeted manual validation when required.
• 4. Cloud, Infrastructure & Enterprise Security
• - Define and validate cloud security baselines
• - Review IAM models, network segmentation, firewall and WAF controls
• - Ensure encryption, logging, monitoring, and least-privilege principles
• - Lead Microsoft 365, Defender, endpoint, and identity security governance
• Hands-on ownership of enterprise security controls.
• 5. Third-Party & Vendor Security
• - Assess vendor security posture prior to adoption
• - Maintain vendor risk framework
• - Respond to client security questionnaires and due diligence
• - Support contract-level security discussions
• 6. AI & Tool Security Governance
• - Assess security implications of new tools and AI platforms
• - Define guardrails for responsible AI and data usage
• - Ensure secure-by-design technology adoption
• 7. Incident Response & Preparedness
• - Maintain incident response plans and escalation procedures
• - Coordinate security incidents across environments
• - Lead post-incident reviews and corrective actions
• 8. Security Culture & Enablement
• - Promote security awareness and best practices
• - Train teams on secure development and operations
• - Continuously improve automation and controls
• Security is a business enabler, not a blocker

Security Engineering Lead

QA Automation Engineer

• Design, develop, and deploy agents tailored to automate routine tasks within teams (e.g., HR, finance, operations, customer support).
• Build lightweight, user-friendly automation pipelines to streamline workflows (e.g., document generation, data entry, approval processes).
• Collaborate with business teams to identify pain points and implement quick-win automation solutions with measurable impact.
• Integrate copilots with existing tools (e.g., Microsoft 365, Teams, Power Platform) to create seamless, intuitive experiences.
• Prototype, test, and iterate on automation solutions based on user feedback and performance metrics.
• Ensure copilot agents and automation pipelines leverage high-quality, secure, and well-structured data from our modern stack: Snowflake (data warehousing), dbt (transformation), Airflow (orchestration).
• Write clean, maintainable Python code for data processing, API integrations, and copilot logic.
• Optimize ETL/ELT processes to support real-time or near-real-time automation needs.
• Partner with team leads to understand their workflows and design copilots that solve real-world problems.
• Train and onboard teams on using copilot agents and automation tools, fostering adoption and self-sufficiency.
• Advocate for efficiency, identifying opportunities to replace manual processes with intelligent automation.
• Document and share best practices to scale automation across the organization.
• Train teams, lead stakeholder engagement, communication, and onboarding.
• Ensure automations are used, adopted, trusted, and delivering measurable value.
• Evangelize automation culture across the organization.
• Partner with DataOps/MLOps and IT in the deployment phase.

Agent – Process Automation Engineer

Data Engineer

• Maintain and manage website scraping configurations using Python
• Monitor scraping configurations for errors and potential crashes.
• Oversee retrieved data to detect potential issues and blockages.
• Coordinate with stakeholders to understand scraping task requirements and report issues.
• Prepare and share periodic reports on scraping activities with stakeholders.
• Develop necessary pipelines to ingest data into the Datalake and perform required transformations.

Customer Support

• Choose assignments based on your availability and location
• Observe every detail: evaluate the atmosphere, level of service, digital and face-to-face interactions on site, follow-up communications, and the overall customer journey
• Provide honest, detailed feedback using short questionnaires