Lead Security Engineer
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 2d ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 10d ago
The date the source published, not the day we noticed it (2026-10-23). Last seen at its source 3h ago.
We have tracked this listing since 23 Oct 2026 (9 days). The employer's own board has carried it every time we have read it, most recently 3 hours ago.
Is it remote?
Marked remote on the employer's board
Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.
Who may apply?
Serbia, Romania
The description states no restriction of its own. This is the source's own tag.
Pay not stated
Similar roles pay $96.7k–206.9k/yr
Middle 50% of 112 listings that do state pay — Engineering · all levels · Eastern Europe · USD/year. This employer has published no salary; this is what comparable listings we hold disclose, never converted between currencies or periods. How this is calculated.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Workable employer's own board first seen 9d ago · last seen 3h ago
The listing
Accelerate your development and exposure to enterprise security technologies, managed services, and cloud security. Join Sedona Digital, a fast-growing scale-up organisation with the ambition to be recognised as a leading technology company.
- We obsess about our customers
- We build outstanding technical solutions
- We create an awesome culture
- We accelerate learning and careers
We are looking for a Senior Security Engineer with strong experience delivering, operating, and improving security solutions across customer environments. The role will focus on CrowdStrike and Microsoft security technologies and will act as a technical reference for customers and internal delivery teams.
You will lead technical delivery activities from design and implementation through to operational handover and ongoing improvement. You will work directly with customers to understand requirements, recommend secure and supportable solutions, resolve complex issues, and ensure that security controls deliver measurable value.
Your activities will include:
- Lead the implementation, configuration, integration, and optimisation of customer security solutions.
- Deliver CrowdStrike Falcon capabilities, including endpoint protection, EDR/XDR, Next-Gen SIEM, identity protection, vulnerability exposure management, cloud security, and workflow automation.
- Work with vendors to ensure tools are correctly configured and being utilized as its full capabilities.
- Keep current with CrowdStrike, Microsoft security, cloud security, threat detection, and incident response capabilities.
- Deliver and support Microsoft security technologies, including Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, and Microsoft Purview.
- Act as the technical reference for customers, providing trusted guidance on architecture, configuration, security operations, integrations, and service improvement.
- Run technical discovery sessions, workshops, solution reviews, demonstrations, and knowledge-transfer activities with customer stakeholders.
- Translate business, security, and operational requirements into practical technical designs, implementation plans, and acceptance criteria.
- Create and maintain high-quality technical documentation, including designs, build documents, implementation plans, runbooks, playbooks, and operational handover material.
- Integrate security platforms with identity, cloud, endpoint, network, ticketing, and third-party systems using supported APIs and automation capabilities.
- Investigate and resolve complex security alerts, incidents, platform issues, configuration gaps, and integration failures within agreed service targets.
- Support major security incidents as a senior technical escalation point, providing clear analysis, containment guidance, remediation actions, and customer communications.
- Perform technical health checks, configuration reviews, use-case tuning, detection improvements, and platform optimisation.
- Ensure delivery follows agreed scope, security standards, change controls, testing requirements, and operational readiness criteria.
- Identify technical risks, dependencies, blockers, and scope changes early, escalating them clearly to customers and delivery stakeholders.
- Mentor engineers and analysts, review technical work, and promote consistent engineering and documentation standards.
- Keep current with CrowdStrike, Microsoft security, cloud security, threat detection, and incident response capabilities.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
- Strong hands-on experience delivering and supporting enterprise security solutions in customer environments.
- Practical experience with the CrowdStrike Falcon platform, including EDR/XDR, Next-Gen SIEM, identity security, vulnerability management, or cloud security.
- Practical experience with Microsoft security products such as Microsoft Defender XDR, Defender for Endpoint, Defender for Cloud, Microsoft Entra ID, Microsoft Intune, or Microsoft Purview.
- Experience leading technical delivery activities, including discovery, design, implementation, testing, migration, documentation, handover, and customer acceptance.
- Ability to act as a customer-facing technical authority and explain complex security topics to technical and non-technical stakeholders.
- Strong knowledge of security operations, incident response, threat detection, endpoint security, identity security, cloud security, and vulnerability management.
- Experience integrating security products using APIs, automation, SIEM/SOAR workflows, and service management platforms.
- Strong troubleshooting, analytical, communication, stakeholder management, and technical writing skills.
- Knowledge of frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls, MITRE ATT&CK, and ITIL.
- Experience working for a managed service provider or across multiple customer environments is desirable.
Certifications
One or more of the following certifications, or equivalent demonstrable experience:
- CrowdStrike Certified Falcon Administrator (CCFA)
- CrowdStrike Certified Falcon Responder (CCFR)
- CrowdStrike Certified SIEM Analyst (CCSA) or SIEM Engineer (CCSE)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM) or relevant GIAC certification
- ITIL certification or equivalent service delivery experience
Benefits
- Remote Work Flexibility
- Opportunity to work in a rapidly growing scale-up organisation
- Medical insurance given after probation period
- Ongoing learning and development opportunities
- Holiday allowance in line with local legislation
- Competitive compensation package
- Performance-based bonus
- Fun budget for team events