Security Engineer, Level 3

🔥 26 minutes ago

🇱🇰 Sri Lanka – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dijital Team

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤝 B2B

💼 Consulting

☁️ SaaS

B2B • Consulting • SaaS

Dijital Team is a smarter offshoring solution for IT teams. We enable you to build a high performing IT team that will decrease your costs and increase your efficiency - accelerating the growth of your business. We take care of the team so you can take care of the rest.

📋 Description

• Act as a senior technical authority for security across multiple customer environments • Design, review, and improve customer security architectures • Establish security standards, recommended configurations, and repeatable best practices • Identify architectural weaknesses and develop remediation roadmaps • Review security solution designs and support onboarding, migrations, and major infrastructure changes • Mentor L1 and L2 engineers • Lead complex security escalations and configuration investigations • Administer, configure, and optimise Microsoft Defender solutions • Design and implement Defender policies and standard configurations • Investigate complex security incidents involving endpoints, identities, email, and cloud environments • Use Microsoft Defender XDR for advanced threat analysis • Provide senior technical support and architecture guidance for Sophos environments • Design and review firewall deployments and configuration baselines • Configure and optimise firewall rules, segmentation, NAT, intrusion prevention, VPNs, SD-WAN, high availability, logging, and monitoring • Design, implement, and maintain ZTNA solutions • Own and improve vulnerability management across customer environments • Prioritise and lead remediation of critical vulnerabilities • Develop vulnerability dashboards, reporting, remediation standards, and security roadmaps • Provide senior-level support for Huntress deployments and investigate advanced detections • Oversee operating system and application patch management • Define patching standards and ensure critical patches meet service-level agreements • Lead customer security compliance initiatives and remediation • Assess environments against Essential Eight, CIS Controls, NIST Cybersecurity Framework, ISO 27001, and cyber insurance requirements • Design and improve identity security controls, including Conditional Access, MFA, PIM, and least-privilege access • Maintain endpoint security configurations and hardening baselines • Lead technical investigations into complex security incidents • Coordinate containment, remediation, endpoint isolation, and account protection • Automate recurring security activities using PowerShell, APIs, and other technologies • Develop reusable deployment processes, tools, scripts, and templates • Support customer environments as a senior escalation resource • Manage incidents and projects through the PSA platform • Maintain technical documentation and participate in solution design and reviews • Support customer onboarding, security assessments, and pre-sales activities • Develop customer security roadmaps with Account Managers and vCIOs • Explain security risks and recommendations in clear business language

🎯 Requirements

• Significant experience within an MSP, MSSP, or IT Service Provider environment • Strong hands-on experience with Microsoft Defender and its security ecosystem • Advanced experience with Sophos Firewall and endpoint security technologies • Proven experience managing vulnerability and patch management programs • Experience implementing security controls across Microsoft 365 environments • Strong knowledge of Microsoft Entra ID and Zero Trust security principles • Solid understanding of TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, and network segmentation • Strong Windows Server and endpoint troubleshooting capabilities • Experience handling complex technical escalations and leading remediation activities • Ability to design and implement practical security improvements • Hands-on experience with ConnectSecure and Huntress is highly desirable • Experience with Sophos ZTNA, Microsoft Intune, Microsoft Defender XDR, and Conditional Access is advantageous • Familiarity with Microsoft Defender for Endpoint, Office 365, Identity, and Vulnerability Management • Knowledge of Essential Eight, CIS Controls, NIST Cybersecurity Framework, and ISO 27001 • PowerShell scripting and API-based automation experience is beneficial • Familiarity with HaloPSA, ConnectWise, or Autotask • Relevant Microsoft, Sophos, or cybersecurity certifications are advantageous • Experience assessing security architectures and identifying technical weaknesses • Ability to translate compliance requirements into practical security controls • Strong understanding of cybersecurity threats, attack techniques, and defensive measures • Experience developing remediation strategies, security baselines, and technical standards • Ability to prioritise vulnerabilities based on exploitability, exposure, asset criticality, and business impact • Strong written and verbal English communication skills • Excellent technical documentation and reporting capabilities • Ability to lead complex remediation activities and provide technical direction • Strong problem-solving skills and a methodical approach to incident investigation • Ability to remain calm during critical incidents while considering customer priorities and operational impact • Proactive mindset focused on root causes, automation, standardisation, and preventing recurring issues

🏖️ Benefits

• Get paid in Australian Dollars • Medical insurance from day one for you + spouse (or parents if unmarried) • Generous OPD coverage from doctor visits to all your medical needs • Home office setup allowance • Internet allowance • Gym & wellness allowance • Regular team events & engagement activities • Mental health & counseling support • Reimbursement for industry certifications • Open-door culture • Flexible work – home or office, wherever you do your best work • Rewards & recognition • Christmas and financial year-end parties