Senior Security Operations Engineer at TeKnowledge

Responsibilities

• Lead investigations of significant cybersecurity incidents and breaches, and act as the technical escalation point for complex security events.
• Lead incident response activities, including containment, forensics, recovery, and lessons learned.
• Conduct advanced threat hunting across endpoint, cloud, identity, and network environments.
• Develop and continuously improve security monitoring use cases and detection strategies.
• Design, implement, and maintain enterprise-wide security controls; lead security reviews for infrastructure, cloud, and application projects.
• Define and maintain security hardening standards; drive the adoption of Zero Trust security principles.
• Own and enhance Microsoft security services: Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra ID Protection, and Privileged Identity Management (PIM).
• Create advanced KQL detections and custom analytics rules; build SOAR automations using Logic Apps; develop security playbooks and response automation; integrate new data sources and threat intelligence feeds.
• Design, implement, secure, and troubleshoot Azure infrastructure across enterprise environments, including Azure Policy, Conditional Access, Key Vault, Entra ID security controls, and Cloud Security Posture Management.
• Design and secure Azure networking environments: Virtual Networks (VNets), Hub-and-Spoke architectures, VNet Peering, Virtual Network Gateways, Azure Firewall, Azure Application Gateway / WAF, Azure Bastion, Private Endpoints, Private DNS, Route Tables, Virtual WAN, Network Watcher, ExpressRoute, and Site-to-Site VPN connectivity.
• Lead the implementation and management of enterprise firewall platforms; define network segmentation strategies; support secure remote access solutions; review routing, VPN, and perimeter security designs.
• Lead vulnerability management activities; prioritize remediation based on business risk and threat intelligence; drive attack surface reduction initiatives; validate remediation of critical findings.
• Mentor and coach Security Operations Engineers; provide technical leadership during major incidents.
• Develop operational standards, procedures, and playbooks; partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.

Requirements

• Bachelor's Degree in Information Security, Computer Science, Networking, or a related discipline (technical degree preferred).
• 5–9 years of professional experience in security operations, security engineering, cloud security, or a related technical security discipline.
• Strong experience in Security Operations, Incident Response, Threat Hunting, Security Monitoring, Digital Forensics, Security Engineering, and the MITRE ATT&CK Framework.
• Strong hands-on experience with Microsoft Security technologies: Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender Suite, Microsoft Purview, Microsoft Entra ID, and Microsoft Defender for Cloud.
• Strong practical experience with Azure Security and Azure Networking, including Azure Hub-and-Spoke designs, Azure Firewall, VPN Gateways, ExpressRoute, VNet Peering, Route Tables, Private Networking, and Hybrid Connectivity.
• Strong experience with KQL, PowerShell, and Logic Apps; Python experience preferred.
• Understanding of Infrastructure as Code concepts.
• Strong networking knowledge covering TCP/IP, DNS, routing, VPN technologies, network segmentation, and firewall architecture.
• Professional English proficiency and professional proficiency in the local language.
• Must have completed the compulsory 1-year NYSC or have an exemption certificate.
• A valid and up to date National Identity Card/NIMC slip is required upon commencement of this role.