Job OverviewAt Azki, We are seeking a highly experienced and proactive Senior Defensive Security Engineer to join our cybersecurity team In this role, you will be responsible for designing, implementing, and maintaining security defenses to protect our infrastructure, applications, and data from cyber threats You will work closely with other security, infrastructure, and development teams to ensure a strong security posture across all systems and environmentsResponsibilitiesDesign and implement security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and SIEMMonitor and respond to security incidents, performing root cause analysis and driving remediation effortsDevelop and maintain detection and alerting rules, playbooks, and incident response processesCollaborate with DevOps and IT teams to ensure secure configurations and hardening of systems, networks, and cloud environmentsConduct threat modeling, vulnerability assessments, and security audits on critical infrastructureContinuously evaluate new security tools and technologies to enhance defensive capabilitiesLead red team vs blue team exercises and contribute to security awareness initiatives across the organizationDocument security policies, procedures, and incident reportsRequired Skills5+ years of hands-on experience in defensive security, blue team operations, or related fieldsStrong understanding of operating system security (Linux, Windows), network protocols, and secure architecturesExperience with SIEM platforms (eg, Splunk, ELK, Sentinel), IDS/IPS, and endpoint security toolsProven incident response and digital forensics skillsFamiliarity with common attack techniques (MITRE ATT&CK, TTPs) and corresponding defensesScripting and automation skills in Python, Bash, or PowerShellExcellent problem-solving, analytical thinking, and communication skillsStrong documentation and reporting abilitiesPreferred/Optional SkillsRelevant certifications such as OSCP, GCIH, GCIA, or CISSPExposure to threat hunting, malware analysis, or reverse engineeringFamiliarity with tools from the ProjectDiscovery or Open Source Security ecosystemsKnowledge of Zero Trust Architecture and modern identity and access management (IAM) principles