Senior Security Engineer

Role Overview

We are looking for a

hands-on Security Platform Engineer to deploy, manage, and continuously improve

the security infrastructure that underpins our MXDR / MSSP operations. The role

covers the full stack from endpoint and network security to SIEM engineering

and detection engineering and is suited for someone who is equally comfortable

hardening a Windows or Linux server, tuning firewall rules, and building

detection logic in a SIEM.

The ideal candidate will

have strong expertise across SIEM platforms, cloud and network security, zero

trust architecture, and automation, with the ability to lead engineering

initiatives and deliver production-grade security solutions.

Key Responsibilities

-Deploy

and administer SIEM platforms, including designing and delivering solutions to

customers.

-Own the log onboarding lifecycle - log source integration,

parsing, normalization, enrichment, and storage optimization across

multi-tenant environments.

-Deliver and Manage EDR and XDR platforms include deployment,

policy configuration, agent management, and health monitoring.

-Participate

in customer workshops, architecture reviews, and prepare HLD and LLD documents

for finalized architecture.

-Support

pre-sales teams in solution, technical discussions, and proposal responses

-Build

and maintain detection content - correlation rules, use cases, and UEBA models

aligned to MITRE ATT&CK

-Develop and maintain SOAR playbooks for automated alert triage,

containment, and response workflows.

-Administer and tune DLP policies; investigate DLP incidents and

work with business teams to reduce false positives while protecting sensitive

data.

-Deploy, harden, and maintain security controls across Windows

and Linux environments, including patch management, OS-level hardening, and

access control.

-Deploy, manage and administer firewall platforms (NGFW) -

including policy creation, rule review, traffic analysis, and periodic audits.

-Configure and support VPN solutions for secure remote and

site-to-site connectivity.

-Extend security controls to cloud environments (AWS, Azure, GCP)

including cloud-native security services, IAM governance, and network security

groups.

-Deploy and administer any IAM Solution to manager privileged

accounts and access policies

-Support

Zero Trust and ZTNA implementations for secure application access

-Monitor

platform health, manage SLAs, and drive capacity and cost-efficiency

improvements

-Maintain

engineering run books, SOPs, and platform documentation.

-Write

and maintain automation scripts (Python, REST APIs) to streamline platform

operations, integrations, and reporting

What We’re Looking For:

-Experience working in an MSSP & MXDR operational

environment.

-5+ years of hands-on experience in security infrastructure and

platform engineering.

-Proven experience deploying and administering firewall platforms

(NGFW) and DLP solutions in enterprise environments.

-Hands-on SIEM Deployment and engineering experience with at

least two platforms (Wazuh, Sentinel, Securonix, QRadar, CrowdStrike SIEM, or

Chronicle).

-Experience deploying and managing any of EDR/XDR platforms -

SentinelOne, CrowdStrike Falcon, or Microsoft Defender.

-Solid detection engineering skills - writing correlation rules,

use cases, and tuning alerts based on MITRE ATT&CK.

-Scripting ability in Python or equivalent for automation and

platform integration tasks.

-Familiarity with SOAR platforms and incident response automation

-Understanding of cloud security fundamentals across AWS, Azure,

or GCP.

-Having relevant cloud security (Azure, AWS, GCP) and tool

expertise certifications will be an added advantage

Key Competencies

-Strong problem-solving and analytical

thinking

-Ability to lead engineering initiatives and

mentor teams

-Excellent communication and stakeholder

management skills

-Passion for automation, innovation, and

continuous improvement