Senior Security Operations Engineer

About the job We're seeking a Senior Security Operations Engineer to join our team and be responsible for leading advanced threat detection, incident response, security engineering, cloud security, and security automation initiatives across the organization. This role acts as the technical escalation point for Security Operations and works closely with Infrastructure, Network, Cloud, and Architecture teams to design and implement secure solutions. The successful candidate must possess strong hands-on experience with Microsoft Security technologies, Azure Security, and Azure Networking, including the design and operation of enterprise-scale hybrid cloud environments Responsibilities Security Operations Leadership: Lead investigations of significant cyber security incidents and breaches. Act as technical escalation point for complex security events. Lead incident response activities including containment, forensics, recovery, and lessons learned. Conduct advanced threat hunting activities across endpoint, cloud, identity, and network environments. Develop and continuously improve security monitoring use cases and detection strategies. Security Engineering & Architecture: Design, implement, and maintain enterprise-wide security controls. Lead security reviews for infrastructure, cloud, and application projects. Define and maintain security hardening standards. Drive adoption of Zero Trust security principles. Review and improve security architecture across hybrid environments. Microsoft Security Platforms: Own and enhance security services including: Microsoft Sentinel Microsoft Defender XDR Defender for Endpoint Defender for Identity Defender for Office 365 Defender for Cloud Apps Microsoft Defender for Cloud Microsoft Purview Microsoft Entra ID Protection Privileged Identity Management (PIM) Responsibilities include: Creating advanced KQL detections. Designing custom analytics rules. Building SOAR automations using Logic Apps. Integrating new data sources and threat intelligence feeds. Developing playbooks and response automation. Azure Security & Azure Networking (Mandatory): Design, implement, secure, and troubleshoot Azure infrastructure including: Azure Security: Microsoft Defender for Cloud Azure Policy Conditional Access Privileged Identity Management Key Vault Entra ID Security Controls Cloud Security Posture Management Azure Networking: Virtual Networks (VNets) Hub-and-Spoke Architectures VNet Peering Virtual Network Gateways Azure Firewall Azure Application Gateway / WAF Azure Bastion Private Endpoints Private DNS Route Tables Virtual WAN Network Watcher ExpressRoute Site-to-Site VPN Connectivity. The role requires practical hands-on experience designing and securing Azure network architectures within hybrid enterprise environments. Network Security: Lead implementation and management of enterprise firewall platforms. Define network segmentation strategies. Support secure remote access solutions. Review routing, VPN, and perimeter security designs. Collaborate with Network Engineering teams on security improvements. Vulnerability & Exposure Management: Lead vulnerability management activities. Prioritize remediation based on business risk and threat intelligence. Drive attack surface reduction initiatives. Validate remediation of critical findings. Mentoring & Collaboration: Mentor and coach Security Operations Engineers. Provide technical leadership during major incidents. Develop operational standards, procedures, and playbooks. Partner with Infrastructure, Network, Cloud, DevOps, and Compliance teams.