Security Engineer

• Act as a senior technical authority for security across multiple customer environments
• Design, review, and improve customer security architectures
• Establish security standards, recommended configurations, and repeatable best practices
• Identify architectural weaknesses and develop remediation roadmaps
• Review security solution designs and support onboarding, migrations, and major infrastructure changes
• Mentor L1 and L2 engineers
• Lead complex security escalations and configuration investigations
• Administer, configure, and optimise Microsoft Defender solutions
• Design and implement Defender policies and standard configurations
• Investigate complex security incidents involving endpoints, identities, email, and cloud environments
• Use Microsoft Defender XDR for advanced threat analysis
• Provide senior technical support and architecture guidance for Sophos environments
• Design and review firewall deployments and configuration baselines
• Configure and optimise firewall rules, segmentation, NAT, intrusion prevention, VPNs, SD-WAN, high availability, logging, and monitoring
• Design, implement, and maintain ZTNA solutions
• Own and improve vulnerability management across customer environments
• Prioritise and lead remediation of critical vulnerabilities
• Develop vulnerability dashboards, reporting, remediation standards, and security roadmaps
• Provide senior-level support for Huntress deployments and investigate advanced detections
• Oversee operating system and application patch management
• Define patching standards and ensure critical patches meet service-level agreements
• Lead customer security compliance initiatives and remediation
• Assess environments against Essential Eight, CIS Controls, NIST Cybersecurity Framework, ISO 27001, and cyber insurance requirements
• Design and improve identity security controls, including Conditional Access, MFA, PIM, and least-privilege access
• Maintain endpoint security configurations and hardening baselines
• Lead technical investigations into complex security incidents
• Coordinate containment, remediation, endpoint isolation, and account protection
• Automate recurring security activities using PowerShell, APIs, and other technologies
• Develop reusable deployment processes, tools, scripts, and templates
• Support customer environments as a senior escalation resource
• Manage incidents and projects through the PSA platform
• Maintain technical documentation and participate in solution design and reviews
• Support customer onboarding, security assessments, and pre-sales activities
• Develop customer security roadmaps with Account Managers and vCIOs
• Explain security risks and recommendations in clear business language

Explore Security Engineer, Level 3 at Dijital Team. Review requirements and application details.