Security Operations Lead Engineer

For one of our clients, an international organization operating in a highly regulated and technology-driven environment, we are looking for a Security Operations Lead Engineer to join their cybersecurity team.

This role is ideal for a hands-on senior security engineer who enjoys building, improving, and operating enterprise security controls across complex environments including network, infrastructure, cloud, endpoint, and collaboration platforms.

You will play a key role in designing, implementing, and continuously improving operational security technologies, while also providing technical guidance to other engineers and collaborating closely with infrastructure and platform teams.

Key Responsibilities

• Lead the design, deployment, and lifecycle management of enterprise security controls.
• Manage and optimize security technologies including:
• Next-generation firewalls (NGFW)
• IDS / IPS
• Web Application Firewalls (WAF)
• DNS security
• Email security and anti-phishing solutions
• Data Loss Prevention (DLP)
• PKI, certificate lifecycle management, TLS/SSL, and secrets management
• Microsoft 365 security capabilities
• Ensure security controls are properly integrated with logging, monitoring, and incident response processes.
• Provide technical leadership and mentoring to security engineering team members.
• Collaborate with cloud, infrastructure, networking, and application teams to embed security controls into services and platforms.
• Drive continuous improvement, tuning, and optimization of detection and prevention capabilities.
• Contribute to security reporting, operational metrics, and control effectiveness monitoring.

Required Experience

• Strong hands-on experience in security engineering or security operations within enterprise environments.
• Experience with technologies such as:
• Firewalls / NGFW
• IDS / IPS
• WAF
• DNS security
• DLP
• PKI, TLS/SSL, certificate management
• SIEM integration and log monitoring
• Experience with Microsoft security stack, such as:
• Microsoft Defender
• Microsoft Sentinel
• Microsoft Purview
• Entra / Conditional Access
• Microsoft 365 security capabilities
• Knowledge of cloud security, preferably in Azure environments.
• Strong understanding of networking fundamentals (TCP/IP, segmentation, routing, VPNs, proxies).
• Experience with automation or scripting (PowerShell, Python, REST APIs) is a plus.

What We Are Looking For

• A hands-on engineer who enjoys solving complex security challenges.
• Experience working in cross-functional technical environments.
• Ability to mentor engineers and contribute to technical leadership.
• Strong analytical thinking, troubleshooting, and problem-solving skills.
• Clear communication with both technical and non-technical stakeholders.

Education & Certifications

• Degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Nice to have certifications:

• CISSP
• CISM
• GIAC
• Microsoft Security certifications (SC-100, SC-200, SC-300)