Senior Security Engineer - Cyber Security

About the role

Cube Networks, an Australian technology services provider, is looking for a Senior Security Engineer to join its growing team in Sri Lanka. Through its cyber security division, Prism Cyber, the company delivers managed security services to Australian enterprise clients in retail, finance, manufacturing and healthcare. The role focuses on security incident management, threat detection, investigation and response, and combines security operations, platform administration, threat hunting and direct client engagement.

Key responsibilities

• Investigate, triage and respond to security alerts and incidents, coordinating remediation with client IT teams
• Proactively identify threats and suspicious activity using Microsoft Sentinel, Defender XDR and CrowdStrike
• Manage and optimise Microsoft Defender for Office 365, Microsoft Purview DLP, sensitivity labels and Conditional Access policies
• Administer CrowdStrike Falcon EDR, including detection tuning, prevention policies, sensor health and incident investigation
• Identify, prioritise and track vulnerabilities and provide remediation recommendations
• Manage Cloudflare security controls, including WAF, DDoS protection, DNS security and web filtering
• Prepare and present security reports, incident trends, risk assessments and recommendations to clients
• Maintain security documentation, improve detection capabilities and contribute to security processes and best practices

Required profile

• 3+ years of hands-on experience in cyber security operations, security engineering or managed security services
• Strong troubleshooting, analytical and problem-solving skills
• Excellent English communication skills and confidence working directly with Australian clients
• Ability to work independently, prioritise incidents and manage multiple security environments

Required skills

• Microsoft Sentinel and Defender XDR, including incident investigation and response
• CrowdStrike Falcon EDR administration
• Microsoft Defender for Office 365 and Microsoft Purview DLP
• Vulnerability management, threat detection and incident response frameworks
• Cloudflare or equivalent web and network security technologies
• Familiarity with MITRE ATT&CK, NIST, ISO 27001 and Essential Eight

Highly desirable: Darktrace, Arctic Wolf MXDR, CrowdStrike Identity Protection and CSPM, KQL, PowerShell and security automation, MSSP or managed services experience, and certifications such as SC-200, SC-401, AZ-500, CISSP, CompTIA CySA+ or CrowdStrike certifications.