Senior Security Engineer

Role Overview

We are looking for a hands-on Security Platform Engineer to deploy, manage, and continuously improve the security infrastructure that underpins our MXDR / MSSP operations. The role covers the full stack from endpoint and network security to SIEM engineering and detection engineering and is suited for someone who is equally comfortable hardening a Windows or Linux server, tuning firewall rules, and building detection logic in a SIEM.

The ideal candidate will have strong expertise across SIEM platforms, cloud and network security, zero trust architecture, and automation, with the ability to lead engineering initiatives and deliver production-grade security solutions.

Key Responsibilities

–         Deploy and administer SIEM platforms, including designing and delivering solutions to customers.

–         Own the log onboarding lifecycle – log source integration, parsing, normalization, enrichment, and storage optimization across multi-tenant environments.

–         Deliver and Manage EDR and XDR platforms include deployment, policy configuration, agent management, and health monitoring.

–         Participate in customer workshops, architecture reviews, and prepare HLD and LLD documents for finalized architecture.

–         Support pre-sales teams in solution, technical discussions, and proposal responses

–         Build and maintain detection content - correlation rules, use cases, and UEBA models aligned to MITRE ATT&CK

–         Develop and maintain SOAR playbooks for automated alert triage, containment, and response workflows.

–         Administer and tune DLP policies; investigate DLP incidents and work with business teams to reduce false positives while protecting sensitive data.

–         Deploy, harden, and maintain security controls across Windows and Linux environments, including patch management, OS-level hardening, and access control.

–         Deploy, manage and administer firewall platforms (NGFW) - including policy creation, rule review, traffic analysis, and periodic audits.

–         Configure and support VPN solutions for secure remote and site-to-site connectivity.

–         Extend security controls to cloud environments (AWS, Azure, GCP) including cloud-native security services, IAM governance, and network security groups.

–         Deploy and administer any IAM Solution to manager privileged accounts and access policies

–         Support Zero Trust and ZTNA implementations for secure application access

–         Monitor platform health, manage SLAs, and drive capacity and cost-efficiency improvements

–         Maintain engineering run books, SOPs, and platform documentation.

–         Write and maintain automation scripts (Python, REST APIs) to streamline platform operations, integrations, and reporting

What We’re Looking For:

–       Experience working in an MSSP & MXDR operational environment.

–       5+ years of hands-on experience in security infrastructure and platform engineering.

–       Proven experience deploying and administering firewall platforms (NGFW) and DLP solutions in enterprise environments.

–       Hands-on SIEM Deployment and engineering experience with at least two platforms (Wazuh, Sentinel, Securonix, QRadar, CrowdStrike SIEM, or Chronicle).

–       Experience deploying and managing any of EDR/XDR platforms — SentinelOne, CrowdStrike Falcon, or Microsoft Defender.

–       Solid detection engineering skills - writing correlation rules, use cases, and tuning alerts based on MITRE ATT&CK.

–       Scripting ability in Python or equivalent for automation and platform integration tasks.

–       Familiarity with SOAR platforms and incident response automation

–       Understanding of cloud security fundamentals across AWS, Azure, or GCP.

–       Having relevant cloud security (Azure, AWS, GCP) and tool expertise certifications will be an added advantage

Key Competencies

-          Strong problem-solving and analytical thinking

-          Ability to lead engineering initiatives and mentor teams

-          Excellent communication and stakeholder management skills

-          Passion for automation, innovation, and continuous improvement