Senior Security Operations Engineer At Teknowledge

• At TeKnowledge, your work makes an impact from day one. We partner with organizations to deliver AI-First Expert Technology Services that drive meaningful impact in AI, Customer Experience, and Cybersecurity. We turn complexity into clarity and potential into progressin a place where people lead and tech empowers.
• You'll be part of a diverse and inclusive team where trust, teamwork, and shared success fuel everything we do. We push boundaries, using advanced technologies to solve complex challenges for clients around the world.
• Here, your work drives real change, and your ideas help shape the future of technology. We invest in you with top-tier training, mentorship, and career developmentensuring you stay ahead in an ever-evolving world.

Why You'll Enjoy It Here:

• Be Part of Something Big - A growing company where your contributions matter.
• Make an Immediate Impact - Support groundbreaking technologies with real-world results.
• Work on Cutting-Edge Tech - AI, cybersecurity, and next-gen digital solutions.
• Thrive in an Inclusive Team - A culture built on trust, collaboration, and respect.
• We Care - Integrity, empathy, and purpose guide every decision.

We're looking for innovators, problem-solvers, and experts ready to drive change and grow with us.

We Are TeKnowledge. Where People Lead and Tech Empowers.

Responsibilities:

Security Operations Leadership

• Lead investigations of significant cyber security incidents and breaches.
• Act as technical escalation point for complex security events.
• Lead incident response activities including containment, forensics, recovery, and lessons learned.
• Conduct advanced threat hunting activities across endpoint, cloud, identity, and network environments.
• Develop and continuously improve security monitoring use cases and detection strategies.

Security Engineering & Architecture

• Design, implement, and maintain enterprise-wide security controls.
• Lead security reviews for infrastructure, cloud, and application projects.
• Define and maintain security hardening standards.
• Drive adoption of Zero Trust security principles.
• Review and improve security architecture across hybrid environments.

Microsoft Security Platforms

Own and enhance security services including:

• Microsoft Sentinel
• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Defender for Cloud Apps
• Microsoft Defender for Cloud
• Microsoft Purview
• Microsoft Entra ID Protection
• Privileged Identity Management (PIM)

Responsibilities include:

• Creating advanced KQL detections.
• Designing custom analytics rules.
• Building SOAR automations using Logic Apps.
• Integrating new data sources and threat intelligence feeds.
• Developing playbooks and response automation.

Azure Security & Azure Networking (Mandatory)

Design, implement, secure, and troubleshoot Azure infrastructure including:

Azure Security

• Microsoft Defender for Cloud
• Azure Policy
• Conditional Access
• Privileged Identity Management
• Key Vault
• Entra ID Security Controls
• Cloud Security Posture Management

Azure Networking

• Virtual Networks (VNets)
• Hub-and-Spoke Architectures
• VNet Peering
• Virtual Network Gateways
• Azure Firewall
• Azure Application Gateway / WAF
• Azure Bastion
• Private Endpoints
• Private DNS
• Route Tables
• Virtual WAN
• Network Watcher
• ExpressRoute
• Site-to-Site VPN Connectivity

The role requires practical hands-on experience designing and securing Azure network architectures within hybrid enterprise environments.

Network Security

• Lead implementation and management of enterprise firewall platforms.
• Define network segmentation strategies.
• Support secure remote access solutions.
• Review routing, VPN, and perimeter security designs.
• Collaborate with Network Engineering teams on security improvements.

Vulnerability & Exposure Management

• Lead vulnerability management activities.
• Prioritize remediation based on business risk and threat intelligence.
• Drive attack surface reduction initiatives.
• Validate remediation of critical findings.

Mentoring & Collaboration

• Mentor and coach Security Operations Engineers.
• Provide technical leadership during major incidents.
• Develop operational standards, procedures, and playbooks.
• Partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.