Security engineer in cloud

Accelerate your development and exposure to enterprise security technologies, managed services, and cloud security. Join Sedona Digital, a fast-growing scale-up organisation with the ambition to be recognised as a leading technology company. We are looking for a Senior Security Engineer with strong experience delivering, operating, and improving security solutions across customer environments. The role will focus on CrowdStrike and Microsoft security technologies and will act as a technical reference for customers and internal delivery teams.

• Lead the implementation, configuration, integration, and optimisation of customer security solutions.
• Deliver CrowdStrike Falcon capabilities, including endpoint protection, EDR/XDR, Next-Gen SIEM, identity protection, vulnerability exposure management, cloud security, and workflow automation.
• Work with vendors to ensure tools are correctly configured and being utilized as its full capabilities.
• Keep current with CrowdStrike, Microsoft security, cloud security, threat detection, and incident response capabilities.
• Deliver and support Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, and Microsoft Purview.
• Act as the technical reference for customers, providing trusted guidance on architecture, configuration, security operations, integrations, and service improvement.
• Run technical discovery sessions, workshops, solution reviews, demonstrations, and knowledge-transfer activities with customer stakeholders.
• Translate business, security, and operational requirements into practical technical designs, implementation plans, and acceptance criteria.
• Create and maintain high-quality technical documentation, including designs, build documents, implementation plans, runbooks, playbooks, and operational handover material.
• Integrate security platforms with identity, cloud, endpoint, network, ticketing, and third-party systems using supported APIs and automation capabilities.
• Investigate and resolve complex security alerts, incidents, platform issues, configuration gaps, and integration failures within agreed service targets.
• Support major security incidents as a senior technical escalation point, providing clear analysis, containment guidance, remediation actions, and customer communications.
• Perform technical health checks, configuration reviews, use-case tuning, detection improvements, and platform optimisation.
• Ensure delivery follows agreed scope, security standards, change controls, testing requirements, and operational readiness criteria.
• Identify technical risks, dependencies, blockers, and scope changes early, escalating them clearly to customers and delivery stakeholders.
• Mentor engineers and analysts, review technical work, and promote consistent engineering and documentation standards.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Strong hands-on experience delivering and supporting enterprise security solutions in customer environments.
• Practical experience with the CrowdStrike Falcon platform, including EDR/XDR, Next-Gen SIEM, identity security, vulnerability management, or cloud security.
• Practical experience with Microsoft security products such as Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, or Microsoft Purview.
• Experience leading technical delivery activities, including discovery, design, implementation, testing, migration, documentation, handover, and customer acceptance.
• Ability to act as a customer-facing technical authority and explain complex security topics to technical and non-technical stakeholders.
• Strong knowledge of security operations, incident response, threat detection, endpoint security, identity security, cloud security, and vulnerability management.
• Experience integrating security products using APIs, automation, SIEM/SOAR workflows, and service management platforms.
• Strong troubleshooting, analytical, communication, stakeholder management, and technical writing skills.
• Knowledge of frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, MITRE ATT&CK, and ITIL.
• One or more of the following certifications, or equivalent demonstrable experience:
• CrowdStrike Certified Falcon Administrator (CCFA)
• CrowdStrike Certified Falcon Responder (CCFR)
• CrowdStrike Certified SIEM Analyst (CCSA) or SIEM Engineer (CCSE)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM) or relevant GIAC certification
• ITIL certification or equivalent service delivery experience
• Будет плюсом: Experience working for a managed service provider or across multiple customer environments is desirable

• Remote Work Flexibility
• Opportunity to work in a rapidly growing scale-up organisation
• Medical insurance given after probation period
• Ongoing learning and development opportunities
• Holiday allowance in line with local legislation
• Competitive compensation package
• Performance-based bonus
• Fun budget for team events