Security Engineer L3
About the role
The Security Engineer L3 role is a senior technical position within a Managed Service Provider (MSP), responsible for leading security engineering, architecture, and continuous improvement across multiple customer environments. The role involves designing and implementing security controls, leading vulnerability remediation, strengthening compliance, resolving complex security incidents, and establishing consistent security standards. The engineer will work closely with infrastructure teams, service desk engineers, Account Managers, and customers, taking ownership of security outcomes and mentoring junior engineers. The company is a technology and managed services provider focused on strengthening cybersecurity and developing scalable security standards for its clients.
Must have
- Significant experience within an MSP, MSSP, or IT Service Provider environment
- Strong hands-on experience with Microsoft Defender and its security ecosystem
- Advanced experience with Sophos Firewall and endpoint security technologies
- Proven experience managing vulnerability and patch management programs
- Experience implementing security controls across Microsoft 365 environments
- Strong knowledge of Microsoft Entra ID and Zero Trust security principles
- Solid understanding of networking fundamentals, including TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, and network segmentation
- Strong Windows Server and endpoint troubleshooting capabilities
- Experience handling complex technical escalations and leading remediation activities
- Ability to design and implement practical security improvements rather than simply identify risks
- Experience assessing security architectures and identifying technical weaknesses
- Ability to translate compliance requirements into practical security controls
- Strong understanding of cybersecurity threats, attack techniques, and defensive measures
- Experience developing remediation strategies, security baselines, and technical standards
- Ability to prioritise vulnerabilities based on exploitability, exposure, asset criticality, and business impact
- Strong written and verbal English communication skills
- Excellent technical documentation and reporting capabilities
- Ability to lead complex remediation activities and provide technical direction
- Confidence making technical decisions and challenging inadequate security practices
- Strong problem-solving skills and a methodical approach to incident investigation
- Ability to remain calm during critical incidents while considering customer priorities and operational impact
- A proactive mindset focused on root causes, automation, standardisation, and preventing recurring issues
Nice to have
- Hands-on experience with ConnectSecure and Huntress is highly desirable
- Experience with Sophos ZTNA, Microsoft Intune, Microsoft Defender XDR, and Conditional Access is advantageous
- Familiarity with Microsoft Defender for Endpoint, Office 365, Identity, and Vulnerability Management
- Knowledge of Essential Eight, CIS Controls, NIST Cybersecurity Framework, and ISO 27001
- PowerShell scripting and API-based automation experience is beneficial
- Familiarity with MSP PSA platforms such as HaloPSA, ConnectWise, or Autotask
- Relevant Microsoft, Sophos, or cybersecurity certifications are advantageous
Technologies
- Authentication
- Azure
- Cybersecurity
- DHCP
- DNS
- Microsoft Entra ID
- Firewall
- Firmware
- Intune
- ISO 27001
- Microsoft 365
- NIST
- PowerShell
- SD-WAN
- TCP/IP
- VLAN
- VPN
- Windows
- Windows Server
- XDR
- Zero Trust
Highlights
Compensation is paid in Australian Dollars. Benefits include medical insurance from day one (covering spouse or parents if unmarried), OPD coverage, home office setup allowance, internet allowance, gym and wellness allowance, mental health support, reimbursement for industry certifications, flexible work arrangements (home or office), and regular team events. The company uses AI tools to assist in recruitment but final decisions are made by humans.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka