Senior Security Engineer

About the role

Software Finder is looking for an experienced Senior Security Engineer to design, implement and continuously improve our cybersecurity architecture across both on‑premises and cloud environments. You will protect business systems, applications, networks and data while ensuring compliance with leading security frameworks.

Key responsibilities

• Design, deploy and maintain enterprise security solutions for cloud and on‑premises workloads.
• Manage and optimise security technologies such as NGFW, VPN, IDS/IPS, WAF, EDR/XDR and network segmentation.
• Implement Zero Trust principles and secure remote‑access solutions.
• Develop and enforce hardening standards for servers, endpoints, cloud infrastructure and network devices.
• Monitor, investigate and respond to security incidents, creating playbooks and post‑incident analysis.
• Administer IAM solutions including Microsoft Entra ID (Azure AD), MFA, SSO, Conditional Access, PIM and identity governance.
• Conduct vulnerability assessments, risk analysis and ensure timely remediation.
• Support compliance initiatives (ISO 27001, SOC 2, NIST, CIS Controls) and assist with security audits.
• Collaborate with Infrastructure, Cloud, DevOps, Engineering and Product teams to embed security.
• Manage SIEM platforms, endpoint protection and security automation tools.
• Mentor junior engineers and promote security awareness across the organisation.

Required profile

• Proactive security professional with strong technical expertise.
• Analytical thinker capable of handling complex incidents.
• Leadership abilities to guide teams and influence security practices.

Required skills

• Next‑Generation Firewalls (NGFW), VPN, IDS/IPS, Web Application Firewall (WAF).
• Endpoint Detection & Response (EDR/XDR) and secure network segmentation.
• Zero Trust architecture and remote‑access security.
• Microsoft Entra ID (Azure AD), Multi‑Factor Authentication (MFA), Single Sign‑On (SSO), Conditional Access, Privileged Identity Management (PIM), identity governance.
• Vulnerability assessment tools and risk analysis methodologies.
• Security Information & Event Management (SIEM) platforms and security automation.
• Knowledge of ISO 27001, SOC 2, NIST Cybersecurity Framework, CIS Controls.