Security Engineer

Key Responsibilities

• Support the implementation and continuous improvement of security controls across cloud environments (Azure, AWS, and/or GCP).
• Assess cloud configurations and workloads for security risks and compliance gaps.
• Collaborate with cloud engineering teams to implement secure-by-design principles.
• Support CNAPP initiatives and remediation programs.
• Act as a technical consultant in the CDC by evaluating, designing, and implementing security solutions aligned with enterprise and SOC maturity goals.
• Support POCs, pilots, and technical evaluations of new security tools, platforms, and capabilities across network, endpoint, cloud, identity, and application security domains.
• Contribute to new integrations between security platforms (SIEM, SOAR, EDR/XDR, TVM, Threat Intelligence, CMDB, ITSM, etc.).
• Translate operational gaps into engineering or automation opportunities .
• Design and set up decoy / deception environments (honeypots, honeytokens, deceptive assets) to enhance threat detection and adversary engagement.
• Contribute to SOAR workflows, scripts, APIs, and integrations (custom or vendor-provided).
• Drive innovation initiatives such as AI/ML-assisted detection, analytics enrichment, and contextual correlation .
• Document architectures, POCs, integration patterns, and operational handover artifacts.
• Assist in the design, implementation, and governance of identity security controls.
• Support authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and privileged access management initiatives.
• Monitor and analyze identity-related security events and anomalies.
• Contribute to identity governance, role management, and access review processes.
• Develop dashboards, reports, and visualizations to provide actionable security insights.
• Work with SIEM, data lake, and analytics platforms to improve visibility across security domains.
• Support executive and operational reporting requirements.

Required Skills & Experience

• 5–10 years of experience in Security Engineering, SOC, TVM, or Cyber Defense roles .
• Strong hands-on experience in security engineering, SOC technologies, or security architecture .
• Experience with API integrations, scripting, or automation (Python, PowerShell, Bash, or similar).
• Hands-on experience with one or more cloud platforms (Azure, AWS, or GCP).
• Strong understanding of Identity and Access Management concepts and technologies.
• Knowledge of network, endpoint, cloud, and identity security fundamentals .
• Familiarity with deception technologies, honeypots, or attack simulation is a strong plus.
• Experience with Microsoft Security technologies including Microsoft Sentinel, Defender XDR, Entra ID, and Azure Security services.
• Knowledge of cloud-native security controls and container security.
• Familiarity with data engineering concepts and modern analytics platforms.
• Experience in global enterprise or regulated environments is an advantage.
• Exposure to SOC maturity models, Threat Modelling , NIST, MITRE ATT&CK , and modern detection engineering practices.
• Exposure to compliance frameworks is a plus.

Key Competencies