Security Engineer - Level 2
Key Responsibilities
Security Operations
· Monitor and investigate security alerts generated by Microsoft Defender, Huntress,
SIEM
· Microsoft Entra ID, and related security systems.
· Perform initial triage and analysis of security incidents.
· Identify suspicious activity and escalate genuine threats appropriately.
· Support incident response activities and assist in remediation efforts.
· Document security incidents and create post-incident reports.
Microsoft Security Administration
· Administer Microsoft Entra ID security controls.
· Support Conditional Access policy deployment and maintenance.
· Manage Multi-Factor Authentication controls.
· Assist with Microsoft Defender for Endpoint configuration and administration.
· Support Intune security baselines and compliance policies.
· Assist with Microsoft Purview and compliance-related activities.
Vulnerability Management
· Review vulnerability scan results.
· Coordinate remediation activities with engineers and clients.
· Track remediation progress against agreed targets.
· Validate remediated vulnerabilities.
· Produce risk and remediation reports.
Endpoint and Device Security
· Support endpoint protection technologies.
· Investigate malware detections and endpoint incidents.
· Validate security baselines.
· Assist with patch management and remediation programs.
· Ensure devices meet Velocity security standards.
Security Monitoring and Reporting
· Review and analyse security events.
· Maintain documentation regarding security incidents and activities.
· Produce regular cybersecurity posture reports.
· Support client reporting requirements.
· Assist with audit evidence gathering and compliance reviews.
Client Engagement
· Explain security recommendations clearly to clients.
· Assist Account Managers and Technical Managers with security reviews.
· Participate in client meetings where security expertise is required.
· Translate technical risks into practical business language.
Continuous Improvement
· Assist in the development of security standards and operating procedures.
· Create and maintain security knowledge-base articles.
· Identify opportunities to automate operational security activities.
· Stay current with Microsoft security capabilities and emerging threats.
Required Skills and Experience
Technical
· 3-5 years of experience in:
o Security operations
o Security engineering
o MSP security services
o Infrastructure security
· Practical experience with:
o Microsoft Defender XDR
o Microsoft Sentinel
o Microsoft Entra ID
o Conditional Access
o Intune
o Vulnerability management platforms
o Security monitoring and incident investigation
o Endpoint management
Preferred Certifications
· SC-300 Identity and Access Administrator
· SC-200 Security Operations Analyst
· MD-102 Endpoint Administrator
· AZ-500 Azure Security Engineer