Security Engineer
G
GXACybersecurity Services
Pakistan. Sri Lanka. South AfricaContractMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
Requirements
- Deep understanding of security engineering principles in on-premises, cloud, and hybrid environments.
- Proven experience in incident response, including threat hunting and log analysis.
- Technical proficiency with security tools such as SIEM, Microsoft Defender for Endpoint, Huntress, and DNSFilter.
- Strong knowledge of infrastructure components including Active Directory, Microsoft Entra ID, Windows servers, and networking.
- Experience with identity and access security, including MFA, Conditional Access, and privileged access management.
- Ability to troubleshoot complex interactions between endpoints, identity systems, and cloud services.
- Capability to produce accurate incident timelines and technical findings for vCISO review.
- Excellent diagnostic skills to distinguish security events from underlying infrastructure issues.
- Experience working in a managed service or multi-client environment.
Responsibilities
- Serve as a Tier 3 escalation point for active security incidents including BEC, AiTM, ransomware, and identity-based attacks.
- Lead technical analysis during incident response, including log review, IOC hunting, and lateral movement tracing.
- Execute containment and eradication actions such as endpoint isolation, session revocation, and credential resets.
- Operate and tune the gShield security stack, including Huntress, Microsoft Defender, Cyrisma, DNSFilter, and SIEM platforms.
- Perform security hardening across on-premises, cloud, and hybrid environments including Active Directory, Entra ID, and firewalls.
- Assess vulnerabilities based on asset criticality, exposure, and business impact.
- Collaborate with SOC, infrastructure, and onboarding teams to validate remediation and support client security improvements.
View Full Description & ApplyYou'll be redirected to the employer's site
