Senior Security Operations Engineer at TeKnowledge

About the job

• We’re seeking a Senior Security Operations Engineer to join our team and be responsible for leading advanced threat detection, incident response, security engineering, cloud security, and security automation initiatives across the organization.
• This role acts as the technical escalation point for Security Operations and works closely with Infrastructure, Network, Cloud, and Architecture teams to design and implement secure solutions.
• The successful candidate must possess strong hands-on experience with Microsoft Security technologies, Azure Security, and Azure Networking, including the design and operation of enterprise-scale hybrid cloud environments

Responsibilities
Security Operations Leadership:

• Lead investigations of significant cyber security incidents and breaches.
• Act as technical escalation point for complex security events.
• Lead incident response activities including containment, forensics, recovery, and lessons learned.
• Conduct advanced threat hunting activities across endpoint, cloud, identity, and network environments.
• Develop and continuously improve security monitoring use cases and detection strategies.

Security Engineering & Architecture:

• Design, implement, and maintain enterprise-wide security controls.
• Lead security reviews for infrastructure, cloud, and application projects.
• Define and maintain security hardening standards.
• Drive adoption of Zero Trust security principles.
• Review and improve security architecture across hybrid environments.

Microsoft Security Platforms:
Own and enhance security services including:

• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Defender for Cloud Apps
• Microsoft Defender for Cloud
• Microsoft Purview
• Microsoft Entra ID Protection
• Privileged Identity Management (PIM)

Responsibilities include:

• Creating advanced KQL detections.
• Designing custom analytics rules.
• Building SOAR automations using Logic Apps.
• Integrating new data sources and threat intelligence feeds.
• Developing playbooks and response automation.

Azure Security & Azure Networking (Mandatory):

• Design, implement, secure, and troubleshoot Azure infrastructure including:

Azure Security:

• Microsoft Defender for Cloud
• Azure Policy
• Conditional Access
• Privileged Identity Management
• Key Vault
• Entra ID Security Controls
• Cloud Security Posture Management

Azure Networking:

• Virtual Networks (VNets)
• Hub-and-Spoke Architectures
• VNet Peering
• Virtual Network Gateways
• Azure Firewall
• Azure Application Gateway / WAF
• Azure Bastion
• Private Endpoints
• Private DNS
• Route Tables
• Virtual WAN
• Network Watcher
• ExpressRoute
• Site-to-Site VPN Connectivity.
• The role requires practical hands-on experience designing and securing Azure network architectures within hybrid enterprise environments.

Network Security:

• Lead implementation and management of enterprise firewall platforms.
• Define network segmentation strategies.
• Support secure remote access solutions.
• Review routing, VPN, and perimeter security designs.
• Collaborate with Network Engineering teams on security improvements.

Vulnerability & Exposure Management:

• Lead vulnerability management activities.
• Prioritize remediation based on business risk and threat intelligence.
• Drive attack surface reduction initiatives.
• Validate remediation of critical findings.

Mentoring & Collaboration:

• Mentor and coach Security Operations Engineers.
• Provide technical leadership during major incidents.
• Develop operational standards, procedures, and playbooks.
• Partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.