At TeKnowledge, we turn complexity into clarity – and potential into progress. We go beyond problem-solving to transform how you grow. By blending cutting-edge technology with expert insight, we help enterprises, governments and tech vendors tackle their biggest challenges while preparing them for what’s next. From strategy to execution, we drive smarter, faster, and more sustained innovation—empowering organizations with the capability and control to lead with confidence.About the job
We’re seeking a Senior Security Operations Engineer to join our team and be responsible for leading advanced threat detection, incident response, security engineering, cloud security, and security automation initiatives across the organization.
This role acts as the technical escalation point for Security Operations and works closely with Infrastructure, Network, Cloud, and Architecture teams to design and implement secure solutions.
The successful candidate must possess strong hands-on experience with Microsoft Security technologies, Azure Security, and Azure Networking, including the design and operation of enterprise-scale hybrid cloud environments
Responsibilities
Security Operations Leadership:
Lead investigations of significant cyber security incidents and breaches.
Act as technical escalation point for complex security events.
Lead incident response activities including containment, forensics, recovery, and lessons learned.
Conduct advanced threat hunting activities across endpoint, cloud, identity, and network environments.
Develop and continuously improve security monitoring use cases and detection strategies.
Security Engineering & Architecture:
Design, implement, and maintain enterprise-wide security controls.
Lead security reviews for infrastructure, cloud, and application projects.
Define and maintain security hardening standards.
Drive adoption of Zero Trust security principles.
Review and improve security architecture across hybrid environments.
Microsoft Security Platforms:
Own and enhance security services including:
Microsoft Sentinel
Microsoft Defender XDR
Defender for Endpoint
Defender for Identity
Defender for Office 365
Defender for Cloud Apps
Microsoft Defender for Cloud
Microsoft Purview
Microsoft Entra ID Protection
Privileged Identity Management (PIM)
Responsibilities include:
Creating advanced KQL detections.
Designing custom analytics rules.
Building SOAR automations using Logic Apps.
Integrating new data sources and threat intelligence feeds.
Developing playbooks and response automation.
Azure Security & Azure Networking (Mandatory):
Design, implement, secure, and troubleshoot Azure infrastructure including:
Azure Security:
Microsoft Defender for Cloud
Azure Policy
Conditional Access
Privileged Identity Management
Key Vault
Entra ID Security Controls
Cloud Security Posture Management
Azure Networking:
Virtual Networks (VNets)
Hub-and-Spoke Architectures
VNet Peering
Virtual Network Gateways
Azure Firewall
Azure Application Gateway / WAF
Azure Bastion
Private Endpoints
Private DNS
Route Tables
Virtual WAN
Network Watcher
ExpressRoute
Site-to-Site VPN Connectivity.
The role requires practical hands-on experience designing and securing Azure network architectures within hybrid enterprise environments.
Network Security:
Lead implementation and management of enterprise firewall platforms.
Define network segmentation strategies.
Support secure remote access solutions.
Review routing, VPN, and perimeter security designs.
Collaborate with Network Engineering teams on security improvements.
Vulnerability & Exposure Management:
Lead vulnerability management activities.
Prioritize remediation based on business risk and threat intelligence.
Drive attack surface reduction initiatives.
Validate remediation of critical findings.
Mentoring & Collaboration:
Mentor and coach Security Operations Engineers.
Provide technical leadership during major incidents.
Develop operational standards, procedures, and playbooks.
Partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.