[Hiring] Senior Security Engineer @Fortellar

Role Description

The Sr. Security Engineer, Cloud Security & Detection designs, deploys, and operates cloud security posture, data protection, and detection and response capability for Fortellar's clients, with primary assignment to large-scale, multi-workstream security remediation engagements. This is a hands-on engineering role with direct client exposure.

• Accountable for standing up a detection capability equivalent to an incumbent managed service before decommissioning that service.
• Clearing an incident backlog in an environment where no response process previously operated.
• Requires deep Azure and Microsoft security platform expertise, real incident response experience, and strong communication skills.
• Must be able to travel 10% - 20% to client sites.

Qualifications

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Preferred certifications: AZ-500, SC-200, SC-100, CCSP or CISSP.
• 8+ years in infrastructure or security engineering, including 5+ years securing Azure environments.
• 4+ years building and tuning Microsoft Sentinel detections (KQL), including Defender XDR and Defender for Cloud.
• Hands-on incident response experience, including leading response to critical incidents.
• Experience with policy-as-code (Azure Policy, Terraform or Bicep), Microsoft Purview and security automation (Logic Apps or Sentinel playbooks).
• 3+ years in a client-facing consulting role, presenting to technical and executive stakeholders.
• Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans.

Requirements

• Assign a named owner and a closure date to every open cloud finding.
• Review all standing exemptions, revoking those without a written rationale and an expiry date.
• Eliminate anonymous and public access from internet-facing cloud resources.
• Rotate and remove verified secrets embedded in cloud resources.
• Establish private link connectivity, network rules, and network security group coverage as platform standards.
• Route diagnostic and platform logging into Microsoft Sentinel.
• Implement landing-zone guardrails as policy-as-code.
• Triage and close the standing backlog of high-severity security incidents.
• Author and publish the incident response plan, severity matrix, and escalation path.
• Enforce remediation tracking for every finding.
• Facilitate cross-functional response during critical incidents.
• Define and test monitoring coverage hours and the out-of-hours escalation path.
• Build and tune Microsoft Sentinel analytics rules, watchlists, and workbooks.
• Produce the technical evaluation supporting the managed detection sourcing decision.
• Design and deploy automated and agentic response playbooks for the highest-volume alert types.
• Direct efforts to reduce alert volume and mean time to resolution.
• Evaluate emerging tooling and AI-driven detection and response capability.
• Design and operate pilot rings and staged rollouts for every change capable of disrupting access or production workloads.
• Prepare, submit, and present change records to the client's change process.
• Execute change during scheduled maintenance windows.
• Halt or defer a rollout where validation is incomplete.

Company Description