Senior Security Operations Engineer at TeKnowledge – Lagos

TeKnowledge is recruiting a Senior Security Operations Engineer in Victoria Island, Lagos. The role provides technical leadership for security operations, major incident response, threat hunting, security engineering and the protection of enterprise cloud and network environments.

Responsibilities

• Lead investigations of significant cybersecurity incidents and breaches, acting as the technical escalation point for complex security events.
• Lead incident response activities, including containment, digital forensics, recovery and lessons learned.
• Conduct advanced threat hunting across endpoint, cloud, identity and network environments.
• Develop and improve security monitoring use cases, detection strategies, operational standards and response playbooks.
• Design, implement and maintain enterprise security controls, lead security reviews for infrastructure, cloud and application projects, and drive security hardening and Zero Trust practices.
• Own and enhance Microsoft security services, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Defender for Cloud, Microsoft Purview and Microsoft Entra ID protection and Privileged Identity Management.
• Create advanced KQL detections and analytics rules, build SOAR automations using Logic Apps, develop security playbooks and integrate data sources and threat-intelligence feeds.
• Design, secure and troubleshoot Azure infrastructure and networking, including Azure Policy, Conditional Access, Key Vault, Entra ID controls, VNets, Hub-and-Spoke architectures, peering, gateways, Azure Firewall, Application Gateway/WAF, Bastion, Private Endpoints, Private DNS, routing, Virtual WAN, ExpressRoute and Site-to-Site VPNs.
• Lead enterprise firewall implementation and management, network segmentation, secure remote access and reviews of routing, VPN and perimeter-security designs.
• Lead vulnerability management, prioritise remediation based on business risk and threat intelligence, reduce attack surface and validate critical remediation.
• Mentor Security Operations Engineers and partner with Infrastructure, Network, Cloud, DevOps and Compliance teams.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Networking or a related discipline; a technical degree is preferred.
• Five to nine years’ professional experience in security operations, security engineering, cloud security or a related technical security discipline.
• Strong experience in security operations, incident response, threat hunting, security monitoring, digital forensics, security engineering and the MITRE ATT&CK Framework.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Defender products, Microsoft Purview, Microsoft Entra ID and Defender for Cloud.
• Practical experience with Azure Security and Azure Networking, including Hub-and-Spoke designs, Azure Firewall, VPN Gateways, ExpressRoute, VNet Peering, Route Tables, private networking and hybrid connectivity.
• Strong experience with KQL, PowerShell and Logic Apps; Python experience is preferred.
• Understanding of Infrastructure as Code concepts and strong networking knowledge covering TCP/IP, DNS, routing, VPNs, network segmentation and firewall architecture.
• Professional English proficiency and professional proficiency in the local language.
• Must have completed the compulsory one-year NYSC or hold an exemption certificate.
• A valid and up-to-date National Identity Card or NIMC slip is required upon commencement.