Senior Security Engineer
About the role
Cube Networks is seeking a Senior Security Engineer to join their team in Sri Lanka, supporting Australian enterprise clients across various industries. The role involves delivering managed security services with a focus on security incident management, threat detection, investigation, and response. The engineer will work with technologies such as Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Microsoft Purview, and Cloudflare. Responsibilities include incident management, threat hunting, vulnerability management, endpoint and cloud security administration, and preparing security reports. Candidates should have strong hands-on experience in cyber security operations and be comfortable working directly with clients.
Must have
- 3+ years of hands-on experience in cyber security operations, security engineering or managed security services.
- Strong experience with Microsoft Sentinel and Defender XDR, including security incident investigation and response.
- Hands-on experience administering CrowdStrike Falcon EDR.
- Experience with Microsoft Defender for Office 365 and Microsoft Purview DLP.
- Understanding of vulnerability management, threat detection and incident response frameworks.
- Experience with Cloudflare or equivalent web and network security technologies.
- Familiarity with security frameworks such as MITRE ATT&CK, NIST, ISO 27001 and Essential Eight.
- Strong troubleshooting, analytical and problem-solving skills.
- Excellent English communication skills and confidence working directly with Australian clients.
- Ability to work independently, prioritise incidents and manage multiple security environments.
Nice to have
- Experience with Darktrace, including threat investigation, detection tuning and platform administration.
- Experience with Arctic Wolf MXDR or similar managed detection and response platforms.
- CrowdStrike Identity Protection and Cloud Security (CSPM) experience.
- Knowledge of KQL, PowerShell and security automation.
- Experience working within an MSSP or enterprise managed services environment.
- Relevant certifications such as SC-200, SC-401, AZ-500, CISSP, CompTIA CySA+ or CrowdStrike certifications.
Technologies
- Azure
- CISSP
- Cloud Security
- Cloudflare
- CrowdStrike
- DLP
- DNS
- EDR
- ISO 27001
- Microsoft 365
- MITRE ATT&CK
- Network Security
- NIST
- PowerShell
- Microsoft Purview
- Microsoft Sentinel
- Threat Hunting
- WAF
- XDR
Highlights
The position requires working Australian business hours (Monday–Friday) from Sri Lanka. The role offers exposure to enterprise clients and modern cyber security technologies, and the opportunity to work closely with experienced consultants. Relevant certifications are highly desirable but not mandatory.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka