Security engineer in cloud

Sedona Digital; United States; Remote; USD 130,000 - 185,000; Full time

Benefits offered by this job

Remote work flexibility

Medical insurance after probation

Ongoing learning and development

Holiday allowance in line with local法

Competitive compensation package

Performance-based bonus

Team events budget

Job summary

Sedona Digital is seeking a Senior Security Engineer to drive enterprise security solutions across customer environments, with a focus on CrowdStrike Falcon and Microsoft security technologies. You will act as a technical reference for customers and internal teams, leading architecture discussions, design reviews, and knowledge transfer.

The role emphasizes hands-on delivery, security operations, and continuous improvement of detections, with opportunities to mentor engineers and contribute to

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science or related field or equivalent practical experience.
• Hands-on experience delivering and supporting enterprise security solutions in customer environments.
• Practical experience with CrowdStrike Falcon platform (EDR/XDR, Next-Gen SIEM, identity security, vulnerability management, cloud security).
• Experience with Microsoft security products (Defender XDR, Defender for Endpoint, Defender for Cloud, Entra ID, Intune, Purview).
• Experience leading technical delivery activities across discovery, design, implementation, testing, migration, documentation, handover, and customer acceptance.
• Ability to be a customer-facing technical authority and explain complex security topics to both technical and non-technical stakeholders.
• Strong knowledge of security operations, incident response, threat detection, endpoint security, identity security, cloud security, and vulnerability management.
• Experience integrating security products using APIs, automation, SIEM/SOAR workflows, and service-management platforms.
• Strong analytical, communication, and writing skills.
• Knowledge of NIST, ISO 27001, CIS Controls, MITRE ATT&CK and ITIL.
• Certifications such as CCFA/CCFR/CCSA/SC-100/SC-200/SC-300/CISSP/CISM or GIAC are a plus.

Responsibilities

• Lead the implementation, configuration, integration, and optimization of customer security solutions.
• Deliver CrowdStrike Falcon capabilities including EDR/XDR, Next-Gen SIEM, identity protection, vulnerability management, and cloud security.
• Coordinate with vendors to ensure proper configuration and full capability utilization.
• Stay current with CrowdStrike, Microsoft security, cloud security, threat detection, and incident response capabilities.
• Deliver and support Microsoft security technologies (Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Cloud, Entra ID, Intune, Purview).
• Act as the technical reference for customers, guiding on architecture, configuration, security operations, integrations, and service improvement.
• Run discovery sessions, workshops, solution reviews, demos, and knowledge-transfer activities with stakeholders.
• Translate business and security requirements into practical technical designs, plans, and acceptance criteria.
• Create and maintain high-quality technical documentation (designs, build docs, runbooks, handbooks, handovers).
• Integrate security platforms with identity, cloud, endpoint, network, ticketing, and third-party systems via APIs and automation.
• Investigate and resolve complex security alerts, incidents, platform issues, and configuration gaps within service targets.
• Support major security incidents as senior escalation point with analysis, containment, remediation, and customer communications.
• Perform health checks, configuration reviews, and tuning to improve detections and platform performance.
• Ensure delivery follows scope, security standards, change controls, testing, and readiness criteria.
• Identify risks and blockers early and escalate to customers and delivery stakeholders.
• Mentor engineers, review technical work, and promote standard engineering/documentation practices.

Skills

CrowdStrike Falcon

Microsoft Defender XDR

Security engineering

Incident response

Cloud security

Education

Bachelor's degree in Cybersecurity or related field

Tools

CrowdStrike Falcon

Microsoft 365 Defender

SIEM/SOAR

Job description

Описание: Accelerate your development and exposure to enterprise security technologies, managed services, and cloud security. Join Sedona Digital, a fast-growing scale-up organisation with the ambition to be recognised as a leading technology company. We are looking for a Senior Security Engineer with strong experience delivering, operating, and improving security solutions across customer environments. The role will focus on CrowdStrike and Microsoft security technologies and will act as a technical reference for customers and internal delivery teams.

Задачи

• Lead the implementation, configuration, integration, and optimisation of customer security solutions.
• Deliver CrowdStrike Falcon capabilities, including endpoint protection, EDR/XDR, Next-Gen SIEM, identity protection, vulnerability exposure management, cloud security, and workflow automation.
• Work with vendors to ensure tools are correctly configured and being utilized as its full capabilities.
• Keep current with CrowdStrike, Microsoft security, cloud security, threat detection, and incident response capabilities.
• Deliver and support Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, and Microsoft Purview.
• Act as the technical reference for customers, providing trusted guidance on architecture, configuration, security operations, integrations, and service improvement.
• Run technical discovery sessions, workshops, solution reviews, demonstrations, and knowledge-transfer activities with customer stakeholders.
• Translate business, security, and operational requirements into practical technical designs, implementation plans, and acceptance criteria.
• Create and maintain high-quality technical documentation, including designs, build documents, implementation plans, runbooks, playbooks, and operational handover material.
• Integrate security platforms with identity, cloud, endpoint, network, ticketing, and third-party systems using supported APIs and automation capabilities.
• Investigate and resolve complex security alerts, incidents, platform issues, configuration gaps, and integration failures within agreed service targets.
• Support major security incidents as a senior technical escalation point, providing clear analysis, containment guidance, remediation actions, and customer communications.
• Perform technical health checks, configuration reviews, use-case tuning, detection improvements, and platform optimisation.
• Ensure delivery follows agreed scope, security standards, change controls, testing requirements, and operational readiness criteria.
• Identify technical risks, dependencies, blockers, and scope changes early, escalating them clearly to customers and delivery stakeholders.
• Mentor engineers and analysts, review technical work, and promote consistent engineering and documentation standards.

Требования

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Strong hands‑on experience delivering and supporting enterprise security solutions in customer environments.
• Practical experience with the CrowdStrike Falcon platform, including EDR/XDR, Next-Gen SIEM, identity security, vulnerability management, or cloud security.
• Practical experience with Microsoft security products such as Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, or Microsoft Purview.
• Experience leading technical delivery activities, including discovery, design, implementation, testing, migration, documentation, handover, and customer acceptance.
• Ability to act as a customer-facing technical authority and explain complex security topics to technical and non-technical stakeholders.
• Strong knowledge of security operations, incident response, threat detection, endpoint security, identity security, cloud security, and vulnerability management.
• Experience integrating security products using APIs, automation, SIEM/SOAR workflows, and service management platforms.
• Strong troubleshooting, analytical, communication, stakeholder management, and technical writing skills.
• Knowledge of frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, MITRE ATT&CK, and ITIL.
• One or more of the following certifications, or equivalent demonstrable experience: CrowdStrike Certified Falcon Administrator (CCFA), CrowdStrike Certified Falcon Responder (CCFR), CrowdStrike Certified SIEM Analyst (CCSA) or SIEM Engineer (CCSE), Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Security Operations Analyst Associate (SC-200), Microsoft Certified: Identity and Access Administrator Associate (SC-300), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or relevant GIAC certification ITIL certification or equivalent service delivery experience.
• Будет плюсом: Experience working for a managed service provider or across multiple customer environments is desirable.

Условия

• Remote Work Flexibility
• Opportunity to work in a rapidly growing scale-up organisation
• Medical insurance given after probation period
• Ongoing learning and development opportunities
• Holiday allowance in line with local legislation
• Competitive compensation package
• Performance-based bonus
• Fun budget for team events