Security Operations Engineer
About the role
The Security Operations Engineer at Brennan is responsible for building, maintaining, and improving security platforms that protect customers. The role involves acting as a trusted escalation point for the analyst team, delivering projects with operational engineering, and collaborating with both customers and internal teams to deliver and enhance managed security services. Key responsibilities include onboarding and transitioning customers onto security platforms, configuring and troubleshooting SIEM/SOAR, endpoint, email, and identity security solutions, and building automation to improve efficiency. The position requires a tertiary qualification in IT, relevant certifications, and at least 3 years of experience in a similar capacity. Brennan offers a supportive environment with extensive benefits, including training bonuses and recognition awards.
Must have
- Tertiary qualifications (Degree or Diploma) in a related IT discipline.
- CySA+, SC-200, AZ-500, ECIH.
- 3+ years of experience in similar capacity.
- Hands-on experience across several of the following areas, with the depth to work independently and the drive to develop further: SIEM & SOAR engineering (Microsoft Sentinel, Securonix) - ingestion, connectors, content and platform health. Endpoint and email security platforms (SentinelOne, CrowdStrike, Defender XDR, Mimecast, Check Point Harmony). Identity and access engineering (Entra ID, Conditional Access, MFA, privileged access) and cloud security across Azure or AWS. Customer onboarding, service transition and change management within an ITIL-aligned delivery model. Automation and scripting (Python, PowerShell, APIs) and a willingness to adopt new tools and practices.
- Strong troubleshooting and root cause analysis ability, with a structured, methodical approach to complex, cross-platform problems.
- Clear and concise communication skills with the ability to explain technical issues to varied audiences.
- Sound change discipline and attention to detail in documentation, change execution, and security control validation.
- Growth mindset - proactive in upskilling, seeking mentorship, and mentoring analysts and associate engineers.
- Commitment to Brennan’s values in day-to-day customer and internal interactions.
Technologies
- AWS
- Azure
- Cloud Security
- CrowdStrike
- EDR
- Microsoft Entra ID
- ISO 27001
- ITIL
- NIST
- PowerShell
- Python
- Microsoft Sentinel
- SentinelOne
- SIEM
- XDR
Highlights
Brennan offers training and certification bonuses, annual all-expenses paid trips for top performers, vibrant social activities, and discounted hardware and software. The company values diversity and learning. No specific application deadline or location requirement is mentioned.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka