Security Operations (SecOps) Engineer at TeKnowledge

Responsibilities:

Threat Detection & Incident Response

• Monitor, investigate, and respond to security alerts generated by SIEM, EDR/XDR, firewalls, email security, and cloud security platforms.
• Perform security event triage and escalate incidents as required.
• Support incident response activities including containment, remediation, and recovery.
• Participate in root cause analysis and post-incident reviews.
• Maintain incident documentation and response procedures.

Security Operations

• Administer and support security solutions including:
• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Office 365
• Defender for Identity
• Defender for Cloud Apps
• Microsoft Purview DLP
• Microsoft Entra ID Protection
• Darktrace Email or equivalent email security platforms
• Support onboarding of log sources and security integrations.
• Assist with tuning alerts and improving detection capabilities.

Network & Perimeter Security

• Implement and maintain firewall policies and security controls.
• Support management of Palo Alto firewalls and VPN services, including:
• Security Policies
• NAT Policies
• VPN Gateways
• Routing Configuration
• Security Hardening
• Assist in network segmentation and security reviews.

Vulnerability Management

• Perform vulnerability assessments and coordinate remediation activities.
• Track remediation progress and validate resolution.
• Assist with security hardening initiatives.

Azure Security Administration

• Support Azure security services including:
• Conditional Access Policies
• Microsoft Defender for Cloud
• Microsoft Entra ID
• Azure Arc
• Virtual Network Gateways
• Network Security Groups (NSGs)
• Assist with implementing security best practices in Azure environments.

Compliance & Documentation

• Maintain security documentation, operational procedures, and knowledge articles.
• Support compliance initiatives including ISO 27001, GDPR, and customer security requirements.
• Participate in audit preparation and evidence collection activities.

Preferred Certifications

• SC-200 Security Operations Analyst
• AZ-500 Azure Security Engineer
• Security+
• CySA+
• GIAC Certifications