Jobs at TeKnowledge

About the job

• We’re seeking a Senior Security Operations Engineer to join our team and be responsible for leading advanced threat detection, incident response, security engineering, cloud security, and security automation initiatives across the organization.
• This role acts as the technical escalation point for Security Operations and works closely with Infrastructure, Network, Cloud, and Architecture teams to design and implement secure solutions.
• The successful candidate must possess strong hands-on experience with Microsoft Security technologies, Azure Security, and Azure Networking, including the design and operation of enterprise-scale hybrid cloud environments

Responsibilities
Security Operations Leadership:

• Lead investigations of significant cyber security incidents and breaches.
• Act as technical escalation point for complex security events.
• Lead incident response activities including containment, forensics, recovery, and lessons learned.
• Conduct advanced threat hunting activities across endpoint, cloud, identity, and network environments.
• Develop and continuously improve security monitoring use cases and detection strategies.

Security Engineering & Architecture:

• Design, implement, and maintain enterprise-wide security controls.
• Lead security reviews for infrastructure, cloud, and application projects.
• Define and maintain security hardening standards.
• Drive adoption of Zero Trust security principles.
• Review and improve security architecture across hybrid environments.

Microsoft Security Platforms:
Own and enhance security services including:

• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Defender for Cloud Apps
• Microsoft Defender for Cloud
• Microsoft Purview
• Microsoft Entra ID Protection
• Privileged Identity Management (PIM)

Responsibilities include:

• Creating advanced KQL detections.
• Designing custom analytics rules.
• Building SOAR automations using Logic Apps.
• Integrating new data sources and threat intelligence feeds.
• Developing playbooks and response automation.

Azure Security & Azure Networking (Mandatory):

• Design, implement, secure, and troubleshoot Azure infrastructure including:

Azure Security:

• Microsoft Defender for Cloud
• Azure Policy
• Conditional Access
• Privileged Identity Management
• Key Vault
• Entra ID Security Controls
• Cloud Security Posture Management

Azure Networking:

• Virtual Networks (VNets)
• Hub-and-Spoke Architectures
• VNet Peering
• Virtual Network Gateways
• Azure Firewall
• Azure Application Gateway / WAF
• Azure Bastion
• Private Endpoints
• Private DNS
• Route Tables
• Virtual WAN
• Network Watcher
• ExpressRoute
• Site-to-Site VPN Connectivity.
• The role requires practical hands-on experience designing and securing Azure network architectures within hybrid enterprise environments.

Network Security:

• Lead implementation and management of enterprise firewall platforms.
• Define network segmentation strategies.
• Support secure remote access solutions.
• Review routing, VPN, and perimeter security designs.
• Collaborate with Network Engineering teams on security improvements.

Vulnerability & Exposure Management:

• Lead vulnerability management activities.
• Prioritize remediation based on business risk and threat intelligence.
• Drive attack surface reduction initiatives.
• Validate remediation of critical findings.

Mentoring & Collaboration:

• Mentor and coach Security Operations Engineers.
• Provide technical leadership during major incidents.
• Develop operational standards, procedures, and playbooks.
• Partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.

go to method of application »

About the job

• We’re seeking a Security Operations (SecOps) Engineer who will be responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organization's global infrastructure. This role plays a key part in maintaining the security posture of our network, cloud, endpoint, and identity environments.
• The successful candidate will be a hands-on security professional with experience administering security platforms, supporting incident response activities, managing vulnerabilities, and implementing security controls within hybrid and cloud-based environments.

Responsibilities
Threat Detection & Incident Response:

• Monitor, investigate, and respond to security alerts generated by SIEM, EDR/XDR, firewalls, email security, and cloud security platforms.
• Perform security event triage and escalate incidents as required.
• Support incident response activities including containment, remediation, and recovery.
• Participate in root cause analysis and post-incident reviews.
• Maintain incident documentation and response procedures.

Security Operations:

• Administer and support security solutions including:
• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Office 365
• Defender for Identity
• Defender for Cloud Apps
• Microsoft Purview DLP
• Microsoft Entra ID Protection
• Darktrace Email or equivalent email security platforms
• Support onboarding of log sources and security integrations.
• Assist with tuning alerts and improving detection capabilities.

Network & Perimeter Security:

• Implement and maintain firewall policies and security controls.
• Support management of Palo Alto firewalls and VPN services, including:
• Security Policies
• NAT Policies
• VPN Gateways
• Routing Configuration
• Security Hardening
• Assist in network segmentation and security reviews.

Vulnerability Management:

• Perform vulnerability assessments and coordinate remediation activities.
• Track remediation progress and validate resolution.
• Assist with security hardening initiatives.

Azure Security Administration:

• Support Azure security services including:
• Conditional Access Policies
• Microsoft Defender for Cloud
• Microsoft Entra ID
• Azure Arc
• Virtual Network Gateways
• Network Security Groups (NSGs)
• Assist with implementing security best practices in Azure environments.

Compliance & Documentation:

• Maintain security documentation, operational procedures, and knowledge articles.
• Support compliance initiatives including ISO 27001, GDPR, and customer security requirements.
• Participate in audit preparation and evidence collection activities.

Preferred Certifications:

• SC-200 Security Operations Analyst
• AZ-500 Azure Security Engineer
• Security+
• CySA+
• GIAC Certifications.