Security Engineer, Level 3

This is a fully remote position, open to applicants in Sri Lanka.

📋 Description

• Serve as a senior technical authority for security across various customer environments.

• Design, assess, and enhance customer security architectures.

• Establish security standards, recommended configurations, and repeatable best practices.

• Identify architectural vulnerabilities and create remediation roadmaps.

• Evaluate security solution designs and assist with onboarding, migrations, and major infrastructure changes.

• Mentor Level 1 and Level 2 engineers.

• Lead intricate security escalations and configuration investigations.

• Manage, configure, and optimize Microsoft Defender solutions.

• Design and implement Defender policies and standard configurations.

• Investigate complex security incidents involving endpoints, identities, email, and cloud environments.

• Utilize Microsoft Defender XDR for advanced threat analysis.

• Provide senior technical support and architectural guidance for Sophos environments.

• Design and evaluate firewall deployments and configuration baselines.

• Configure and optimize firewall rules, segmentation, NAT, intrusion prevention, VPNs, SD-WAN, high availability, logging, and monitoring.

• Design, implement, and maintain ZTNA solutions.

• Own and enhance vulnerability management across customer environments.

• Prioritize and lead the remediation of critical vulnerabilities.

• Develop vulnerability dashboards, reporting, remediation standards, and security roadmaps.

• Provide senior-level support for Huntress deployments and investigate advanced detections.

• Oversee operating system and application patch management.

• Define patching standards and ensure critical patches adhere to service-level agreements.

• Lead customer security compliance initiatives and remediation efforts.

• Assess environments against Essential Eight, CIS Controls, NIST Cybersecurity Framework, ISO 27001, and cyber insurance requirements.

• Design and enhance identity security controls, including Conditional Access, MFA, PIM, and least-privilege access.

• Maintain endpoint security configurations and hardening baselines.

• Lead technical investigations into intricate security incidents.

• Coordinate containment, remediation, endpoint isolation, and account protection.

• Automate recurring security tasks using PowerShell, APIs, and other technologies.

• Develop reusable deployment processes, tools, scripts, and templates.

• Serve as a senior escalation resource supporting customer environments.

• Manage incidents and projects through the PSA platform.

• Maintain technical documentation and participate in solution design and reviews.

• Support customer onboarding, security assessments, and pre-sales activities.

• Collaborate with Account Managers and vCIOs to develop customer security roadmaps.

• Clearly communicate security risks and recommendations in business-friendly language.

⛳️ Requirements

• Extensive experience in an MSP, MSSP, or IT Service Provider environment.

• Strong practical experience with Microsoft Defender and its security ecosystem.

• Advanced experience with Sophos Firewall and endpoint security technologies.

• Proven track record in managing vulnerability and patch management programs.

• Experience implementing security controls across Microsoft 365 environments.

• Strong knowledge of Microsoft Entra ID and Zero Trust security principles.

• Solid understanding of TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, and network segmentation.

• Strong troubleshooting capabilities for Windows Server and endpoints.

• Experience managing complex technical escalations and leading remediation activities.

• Ability to design and implement effective security improvements.

• Hands-on experience with ConnectSecure and Huntress is highly desirable.

• Experience with Sophos ZTNA, Microsoft Intune, Microsoft Defender XDR, and Conditional Access is a plus.

• Familiarity with Microsoft Defender for Endpoint, Office 365, Identity, and Vulnerability Management.

• Knowledge of Essential Eight, CIS Controls, NIST Cybersecurity Framework, and ISO 27001.

• Experience with PowerShell scripting and API-based automation is beneficial.

• Familiarity with HaloPSA, ConnectWise, or Autotask.

• Relevant Microsoft, Sophos, or cybersecurity certifications are advantageous.

• Proven experience assessing security architectures and identifying technical weaknesses.

• Ability to translate compliance requirements into practical security controls.

• Strong understanding of cybersecurity threats, attack techniques, and defensive measures.

• Experience developing remediation strategies, security baselines, and technical standards.

• Ability to prioritize vulnerabilities based on exploitability, exposure, asset criticality, and business impact.

• Excellent written and verbal communication skills in English.

• Strong skills in technical documentation and reporting.

• Ability to lead complex remediation activities and provide technical direction.

• Strong problem-solving skills and a methodical approach to incident investigation.

• Ability to remain composed during critical incidents while considering customer priorities and operational impact.

• Proactive mindset focused on identifying root causes, automation, standardization, and preventing recurring issues.

🏝️ Benefits

• Receive payment in Australian Dollars.

• Medical insurance from day one for you and your spouse (or parents if unmarried).

• Generous OPD coverage from doctor visits to all your medical needs.

• Home office setup allowance.

• Internet allowance.

• Gym and wellness allowance.

• Regular team events and engagement activities.

• Mental health and counseling support.

• Reimbursement for industry certifications.

• Open-door culture.

• Flexible work arrangements – home or office, wherever you perform your best work.

• Rewards and recognition.

• Christmas and financial year-end parties.