Senior Azure Security Operations Engineer

About the role

TeKnowledge is seeking a Senior Azure Security Operations Engineer to lead advanced threat detection, incident response, security engineering, cloud security and security automation across the organization. The role acts as the technical escalation point for Security Operations and works closely with Infrastructure, Network, Cloud and Architecture teams to design and implement secure solutions, including enterprise-scale hybrid cloud environments.

Key responsibilities

• Lead investigations of significant cybersecurity incidents and breaches, and act as the technical escalation point for complex security events.
• Lead incident response, including containment, forensics, recovery and lessons learned.
• Conduct advanced threat hunting across endpoint, cloud, identity and network environments.
• Develop and improve security monitoring use cases and detection strategies.
• Design, implement and maintain enterprise-wide security controls and lead security reviews for infrastructure, cloud and application projects.
• Define and maintain security hardening standards and drive Zero Trust adoption.
• Own and enhance Microsoft security services such as Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Purview, Entra ID Protection and PIM.
• Create KQL detections and custom analytics rules, build SOAR automations with Logic Apps, develop security playbooks and integrate threat intelligence feeds.
• Design, implement and troubleshoot Azure infrastructure (Policy, Conditional Access, Key Vault, Entra ID, CSPM) and secure Azure networking (VNet hub-and-spoke, Firewalls, ExpressRoute, Private Endpoints, etc.).
• Lead firewall platform implementation, network segmentation, secure remote access and vulnerability management.
• Mentor Security Operations Engineers and provide technical leadership during major incidents.
• Develop operational standards, procedures and playbooks and partner with Infrastructure, Network, Cloud, DevOps and Compliance teams.

Required profile

• 5-9 years of experience in security operations, security engineering, cloud security or a related technical security discipline.
• Bachelor's degree in Information Security, Computer Science, Networking or a related discipline (technical degree preferred).
• Compulsory 1-year NYSC completed or exemption certificate, and a valid, up-to-date National Identity Card/NIMC slip.
• Professional English proficiency and professional proficiency in the local language.

Required skills

• Hands-on experience with Microsoft Sentinel, Defender XDR, Defender suite, Purview, Entra ID and Defender for Cloud.
• Strong practical experience with Azure Security and Azure Networking, including hub-and-spoke designs, Azure Firewall, ExpressRoute and private networking.
• KQL, PowerShell and Logic Apps; Python preferred.
• Understanding of Infrastructure as Code concepts.
• Strong networking knowledge (TCP/IP, DNS, routing, VPN, network segmentation, firewall architecture).