Security Operations (SecOps) Engineer

Overview

We’re seeking a Security Operations (SecOps) Engineer to monitor, detect, investigate, and respond to cybersecurity threats across the organization’s global infrastructure. This role plays a key part in maintaining the security posture of network, cloud, endpoint, and identity environments. The successful candidate will be a hands-on security professional with experience administering security platforms, supporting incident response activities, managing vulnerabilities, and implementing security controls within hybrid and cloud-based environments.

At TeKnowledge, your work makes an impact from day one. We partner with organizations to deliver AI-First Expert Technology Services that drive meaningful impact in AI, Customer Experience, and Cybersecurity. We turn complexity into clarity and potential into progress—in a place where people lead and tech empowers.

You’ll be part of a diverse and inclusive team where trust, teamwork, and shared success fuel everything we do. We push boundaries, using advanced technologies to solve complex challenges for clients around the world.

Here, your work drives real change, and your ideas help shape the future of technology. We invest in you with top-tier training, mentorship, and career development—ensuring you stay ahead in an ever-evolving world.

Why You’ll Enjoy It Here:

• Be Part of Something Big – A growing company where your contributions matter.
• Make an Immediate Impact – Support groundbreaking technologies with real-world results.
• Work on Cutting-Edge Tech – AI, cybersecurity, and next-gen digital solutions.
• Thrive in an Inclusive Team – A culture built on trust, collaboration, and respect.
• We Care – Integrity, empathy, and purpose guide every decision.

We’re looking for innovators, problem-solvers, and experts ready to drive change and grow with us.

We Are TeKnowledge. Where People Lead and Tech Empowers.

Responsibilities

Threat Detection & Incident Response

Monitor, investigate, and respond to security alerts generated by SIEM, EDR/XDR, firewalls, email security, and cloud security platforms.

Perform security event triage and escalate incidents as required.

Support incident response activities, including containment, remediation, and recovery.

Participate in root cause analysis and post-incident reviews.

Maintain incident documentation and response procedures.

Security Operations

• Administer and support security solutions, including:
  • Microsoft Sentinel
  • Microsoft Defender XDR
  • Defender for Endpoint
  • Defender for Office 365
  • Defender for Identity
  • Defender for Cloud Apps
  • Microsoft Purview DLP
  • Microsoft Entra ID Protection
  • Darktrace Email or equivalent email security platforms
• Support the onboarding of log sources and security integrations.
• Assist with tuning alerts and improving detection capabilities.

Network & Perimeter Security

• Implement and maintain firewall policies and security controls.
• Support the management of Palo Alto firewalls and VPN services, including:
  • Security Policies
  • NAT Policies
  • VPN Gateways
  • Routing Configuration
  • Security Hardening
• Assist with network segmentation and security reviews.

Vulnerability Management

• Perform vulnerability assessments and coordinate remediation activities.
• Track remediation progress and validate resolution.
• Assist with security hardening initiatives.

Azure Security Administration

• Support Azure security services, including:
  • Conditional Access Policies
  • Microsoft Defender for Cloud
  • Microsoft Entra ID
  • Azure Arc
  • Virtual Network Gateways
  • Network Security Groups (NSGs)
• Assist with implementing security best practices across Azure environments.

Compliance & Documentation

• Maintain security documentation, operational procedures, and knowledge articles.
• Support compliance initiatives, including ISO 27001, GDPR, and customer security requirements.
• Participate in audit preparation and evidence collection activities.

Qualifications

• 3–4 years of professional experience in security operations, cybersecurity, security engineering, or a related discipline.
• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related discipline.
• High school education required.
• Technical degree preferred.
• Professional English proficiency.
• Professional proficiency in the local language.
• Strong understanding of cybersecurity principles and security operations.
• Experience with Microsoft Sentinel and Microsoft Defender technologies.
• Experience with firewall technologies such as Palo Alto, Fortinet, Cisco, or Check Point.
• Understanding of networking principles, including TCP/IP, DNS, routing, VPNs, and network segmentation.
• Familiarity with Zero Trust architecture and Identity Security concepts.
• Working knowledge of Microsoft KQL.
• Basic scripting and automation skills using PowerShell or Python.
• Strong analytical and troubleshooting skills.
• Strong communication skills and the ability to work effectively within a global team.

Preferred Certifications

• SC-200 – Security Operations Analyst
• AZ-500 – Azure Security Engineer
• Security+
• CySA+
• GIAC Certifications