{"id":2508372,"url":"https://alion.io/job/dijital-team-security-engineer-l3","title":"Security Engineer L3","company":{"id":4553,"name":"Dijital Team","domain":"dijitalteam.com","url":"https://alion.io/company/dijitalteam","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":["LK"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":70000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Service Desk","optional":false},{"name":"Sophos","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"ISO 27001","optional":true},{"name":"Least Privilege","optional":true},{"name":"PowerShell","optional":true},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-10-14T03:52:42Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T17:55:33Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About the Role\nWe are seeking an experienced L3 Security Engineer to lead security engineering, architecture, and continuous improvement across multiple customer environments within a Managed Service Provider (MSP).\nThis senior technical role goes beyond security monitoring and alert triage. You will design and implement security controls, lead vulnerability remediation, strengthen compliance, resolve complex security incidents, and establish consistent security standards across customer environments.\nWorking closely with infrastructure teams, service desk engineers, Account Managers, and customers, you will take ownership of security outcomes while mentoring junior engineers and driving a proactive approach to cybersecurity.\nAbout the Client\nYou will be working with a technology and managed services provider supporting multiple customer environments. The organisation is focused on strengthening cybersecurity, improving service delivery, and developing scalable security standards that help customers reduce risk and maintain resilient IT environments.\nIdeal Profile\nTechnical Expertise\nSignificant experience within an MSP, MSSP, or IT Service Provider environment\n\nStrong hands-on experience with Microsoft Defender and its security ecosystem\n\nAdvanced experience with Sophos Firewall and endpoint security technologies\n\nProven experience managing vulnerability and patch management programs\n\nExperience implementing security controls across Microsoft 365 environments\n\nStrong knowledge of Microsoft Entra ID and Zero Trust security principles\n\nSolid understanding of networking fundamentals, including TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, and network segmentation\n\nStrong Windows Server and endpoint troubleshooting capabilities\n\nExperience handling complex technical escalations and leading remediation activities\n\nAbility to design and implement practical security improvements rather than simply identify risks\n\nSecurity Platforms & Technologies\nHands-on experience with ConnectSecure and Huntress is highly desirable\n\nExperience with Sophos ZTNA, Microsoft Intune, Microsoft Defender XDR, and Conditional Access is advantageous\n\nFamiliarity with Microsoft Defender for Endpoint, Office 365, Identity, and Vulnerability Management\n\nKnowledge of Essential Eight, CIS Controls, NIST Cybersecurity Framework, and ISO 27001\n\nPowerShell scripting and API-based automation experience is beneficial\n\nFamiliarity with MSP PSA platforms such as HaloPSA, ConnectWise, or Autotask\n\nRelevant Microsoft, Sophos, or cybersecurity certifications are advantageous\n\nSecurity Architecture & Compliance\nExperience assessing security architectures and identifying technical weaknesses\n\nAbility to translate compliance requirements into practical security controls\n\nStrong understanding of cybersecurity threats, attack techniques, and defensive measures\n\nExperience developing remediation strategies, security baselines, and technical standards\n\nAbility to prioritise vulnerabilities based on exploitability, exposure, asset criticality, and business impact\n\nLeadership & Communication\nStrong written and verbal English communication skills\n\nExcellent technical documentation and reporting capabilities\n\nAbility to lead complex remediation activities and provide technical direction\n\nConfidence making technical decisions and challenging inadequate security practices\n\nStrong problem-solving skills and a methodical approach to incident investigation\n\nAbility to remain calm during critical incidents while considering customer priorities and operational impact\n\nA proactive mindset focused on root causes, automation, standardisation, and preventing recurring issues\n\nResponsibilities\nSecurity Architecture & Technical Leadership\nAct as a senior technical authority for security across multiple customer environments\n\nDesign, review, and improve customer security architectures\n\nEstablish security standards, recommended configurations, and repeatable best practices\n\nIdentify architectural weaknesses and develop remediation roadmaps for complex or high-risk issues\n\nReview security solution designs and support customer onboarding, migrations, and major infrastructure changes\n\nMentor L1 and L2 engineers and strengthen internal security capabilities\n\nLead complex security escalations and configuration investigations\n\nMicrosoft Defender\nAdminister, configure, and optimise Microsoft Defender security solutions across customer environments\n\nDesign and implement Defender policies and standard configurations\n\nConfigure and maintain Attack Surface Reduction rules, endpoint detection and response, automated investigation, web filtering, endpoint firewall policies, device control, antivirus, and tamper protection\n\nInvestigate complex security incidents involving endpoints, identities, email, and cloud environments\n\nUse Microsoft Defender XDR to conduct advanced threat analysis\n\nReview Secure Score, vulnerability data, and security exposure to identify improvement opportunities\n\nSupport migrations from third-party endpoint security platforms where appropriate\n\nIdentify opportunities to improve Microsoft licensing utilisation and security capabilities\n\nSophos Firewall & Endpoint Security\nProvide senior technical support and architecture guidance across Sophos security environments\n\nDesign and review firewall deployments and establish standard configuration baselines\n\nConfigure and optimise firewall rules, network segmentation, NAT, intrusion prevention, web filtering, application control, VPNs, SD-WAN, high availability, logging, and monitoring\n\nTroubleshoot complex firewall, connectivity, and endpoint security issues\n\nReview configurations for security weaknesses and unnecessary exposure\n\nManage Sophos Central and endpoint security policies\n\nSupport firmware upgrades, migrations, firewall refreshes, and security platform consolidation\n\nZero Trust Network Access\nDesign, implement, and maintain Zero Trust Network Access (ZTNA) solutions\n\nDevelop secure application access models based on user identity, device health, application requirements, location, authentication risk, and access needs\n\nApply least-privilege principles and integrate ZTNA with Microsoft Entra ID\n\nReduce reliance on traditional VPN technologies where appropriate\n\nTroubleshoot complex ZTNA and authentication issues\n\nAssess existing remote access environments and develop Zero Trust migration strategies\n\nEstablish repeatable ZTNA deployment standards across customer environments\n\nVulnerability Management\nOwn and improve the vulnerability management approach across customer environments\n\nReview ConnectSecure findings and prioritise remediation based on exploitability, internet exposure, asset criticality, and business impact\n\nLead remediation of critical vulnerabilities and investigate recurring issues\n\nDevelop remediation strategies involving patching, configuration changes, network segmentation, application upgrades, compensating controls, firewall changes, platform migrations, or software replacement\n\nIdentify unsupported and end-of-life systems and develop remediation or replacement plans\n\nTrack unresolved vulnerabilities and ensure appropriate risk decisions are made\n\nValidate remediation through rescanning and verification\n\nDevelop vulnerability dashboards, reporting, remediation standards, and technical security roadmaps\n\nHuntress Security\nProvide senior-level support for Huntress deployments across customer environments\n\nInvestigate advanced detections and SOC escalations\n\nAnalyse persistent footholds, suspicious applications, and unusual system activity\n\nEnsure agents and services are deployed correctly and endpoints are appropriately protected\n\nAssess SOC recommendations and coordinate suitable technical responses\n\nIdentify recurring trends and use findings to strengthen security standards\n\nEstablish processes for resolving escalations within agreed timeframes\n\nPatch Management\nProvide technical oversight of operating system and application patch management\n\nDefine and optimise patching standards and review compliance across customer environments\n\nInvestigate systemic patching failures and complex Windows Update or application patching issues\n\nDevelop strategies for critical and zero-day vulnerability remediation\n\nEnsure critical security patches are deployed within agreed service-level agreements\n\nIdentify systems and applications that cannot be reliably patched and develop alternative remediation or upgrade plans\n\nCoordinate patching for servers and critical business systems\n\nMonitor supported operating system versions and end-of-life dates\n\nIdentify opportunities to improve patching through automation and technology refresh initiatives\n\nCompliance Management & Remediation\nLead technical initiatives to improve customer security compliance\n\nAssess environments against relevant frameworks, including Essential Eight, CIS Controls, NIST Cybersecurity Framework, ISO 27001, and cyber insurance requirements\n\nIdentify compliance gaps and develop practical remediation strategies\n\nImplement or oversee required security controls and maintain progress through to completion\n\nAssist with audit evidence collection and customer security assessments\n\nDevelop security baselines, technical policies, and configuration standards\n\nRecommend alternative controls where compliance requirements cannot be met directly\n\nIdentity & Access Security\nDesign and improve identity security controls across customer environments\n\nReview Microsoft Entra ID configurations and implement Conditional Access, multi-factor authentication, Privileged Identity Management, and secure authentication methods\n\nManage role-based access, administrative accounts, device compliance, and privileged permissions\n\nIdentify excessive access and implement least-privilege controls\n\nInvestigate complex authentication and access incidents\n\nSupport compromised identity investigations and establish standard identity security configurations\n\nEndpoint Security & Hardening\nDesign and maintain secure endpoint configurations and security baselines\n\nEnsure security controls are deployed consistently across devices\n\nManage security integration across Microsoft Defender, Sophos Endpoint, Huntress, Microsoft Intune, and Microsoft Entra ID\n\nImplement device hardening, endpoint encryption, BitLocker, and application control where appropriate\n\nReview Attack Surface Reduction policies and local administrative privileges\n\nIdentify unmanaged or non-compliant endpoints and develop remediation plans for legacy devices\n\nSecurity Incident Escalation\nLead technical investigations into complex security incidents\n\nCoordinate containment, remediation, endpoint isolation, and account protection\n\nDetermine incident scope, affected systems, root causes, persistence, and potential lateral movement\n\nCollaborate with third-party SOCs, vendors, and internal engineers during incident response\n\nSupport customer communications and provide clear technical guidance\n\nDevelop post-incident recommendations to reduce the risk of recurrence\n\nSecurity Automation & Continuous Improvement\nIdentify opportunities to automate recurring security activities\n\nUse PowerShell, APIs, and other automation technologies to improve security operations\n\nAutomate security configuration checks and appropriate vulnerability remediation workflows\n\nDevelop reusable deployment processes, internal tools, scripts, and templates\n\nImprove documentation and standardise security processes across customer environments\n\nTurn recurring incidents and vulnerabilities into improvements in architecture, automation, and security standards\n\nMSP Service Delivery & Customer Engagement\nSupport multiple customer environments and act as a senior escalation resource for service desk and infrastructure teams\n\nManage complex security incidents and projects through the PSA platform\n\nMaintain detailed technical documentation and participate in solution design and technical reviews\n\nAssist with customer onboarding,...","description_format":"text","description_chars":13337,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule","Health insurance","Home office"],"hiring_locations":[{"name":"Sri Lanka","iso":"LK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Help Desk & Service Desk","Endpoint Security","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-14T08:24:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":22,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/dijital-team-security-engineer-l3","json_url":"https://alion.io/job/dijital-team-security-engineer-l3.json","meta":{"generated_at":"2026-10-15T21:23:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32464,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4553},"rest":"https://alion.io/mcp/rest/get_company?id=4553"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdijital-team-security-engineer-l3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdijital-team-security-engineer-l3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdijital-team-security-engineer-l3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dijital-team-security-engineer-l3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdijital-team-security-engineer-l3"}]}