Security Operations (SecOps) Engineer at TeKnowledge

About the job

• We’re seeking a Security Operations (SecOps) Engineer who will be responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organization's global infrastructure. This role plays a key part in maintaining the security posture of our network, cloud, endpoint, and identity environments.
• The successful candidate will be a hands-on security professional with experience administering security platforms, supporting incident response activities, managing vulnerabilities, and implementing security controls within hybrid and cloud-based environments.

Responsibilities
Threat Detection & Incident Response:

• Monitor, investigate, and respond to security alerts generated by SIEM, EDR/XDR, firewalls, email security, and cloud security platforms.
• Perform security event triage and escalate incidents as required.
• Support incident response activities including containment, remediation, and recovery.
• Participate in root cause analysis and post-incident reviews.
• Maintain incident documentation and response procedures.

Security Operations:

• Administer and support security solutions including:
• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Office 365
• Defender for Identity
• Defender for Cloud Apps
• Microsoft Purview DLP
• Microsoft Entra ID Protection
• Darktrace Email or equivalent email security platforms
• Support onboarding of log sources and security integrations.
• Assist with tuning alerts and improving detection capabilities.

Network & Perimeter Security:

• Implement and maintain firewall policies and security controls.
• Support management of Palo Alto firewalls and VPN services, including:
• Security Policies
• NAT Policies
• VPN Gateways
• Routing Configuration
• Security Hardening
• Assist in network segmentation and security reviews.

Vulnerability Management:

• Perform vulnerability assessments and coordinate remediation activities.
• Track remediation progress and validate resolution.
• Assist with security hardening initiatives.

Azure Security Administration:

• Support Azure security services including:
• Conditional Access Policies
• Microsoft Defender for Cloud
• Microsoft Entra ID
• Azure Arc
• Virtual Network Gateways
• Network Security Groups (NSGs)
• Assist with implementing security best practices in Azure environments.

Compliance & Documentation:

• Maintain security documentation, operational procedures, and knowledge articles.
• Support compliance initiatives including ISO 27001, GDPR, and customer security requirements.
• Participate in audit preparation and evidence collection activities.

Preferred Certifications:

• SC-200 Security Operations Analyst
• AZ-500 Azure Security Engineer
• Security+
• CySA+
• GIAC Certifications.