About the role
You will define and enforce secure configuration standards, access controls, and credential management; drive vulnerability management, configuration compliance, proactive security reviews, and threat modeling to reduce the attack surface across the device lifecycle. You will improve the development and operations of related systems and platforms - building and monitoring telemetry and analytics in Kusto (Azure Data Explorer) to surface patterns, detect anomalies, and strengthen AI-assisted detection, and delivering high-quality automation that reduces manual toil. You will take part in the on-call (DRI) rotation for major-impact incidents - leading triage, root-cause analysis, and enforcement actions - and coordinate multiple workstreams under pressure. You will follow prescriptive security, privacy, and compliance standards, and periodically support penetration testing, SOX compliance, and security audits. You will collaborate within and across teams - sharing insights and best practices, resolving cross-team conflicts, influencing security policy, and mentoring other engineers. Embody our culture and values. Bachelor's Degree in Computer Science, Information Technology, or related field AND 3+ years technical experience in software engineering, network engineering, service engineering, or systems engineering OR equivalent experience. Experience in SOC, SecOps, or InfoSec environments, including threat detection and response, threat suppression, and incident response. Hands-on experience with network security and detection engineering - ACLs, control-plane protections, AAA, segmentation, and telemetry-driven detection using large-scale data platforms such as Kusto (Azure Data Explorer). Experience administering or securing enterprise network infrastructure across multi-vendor routing, switching, and firewall platforms, and familiarity with network protocols (TCP/IP, DNS, DHCP, BGP, OSPF). Experience with vulnerability management and configuration/security compliance in large-scale cloud or hybrid environments (e.g., Azure), including SOX and audit-readiness practices. Relevant industry certifications such as CCNP, CCIE, CISM, OSCP, CompTIA Security+, or SANS GCIA/GCIH.
