Technical Security Engineer

1. Security Architecture & Solution Design
   

•    Assess client security environments and design end-to-end security architectures tailored to their risk profile, compliance requirements, and infrastructure maturity
•    Architect and implement Zero Trust frameworks, identity and access management (IAM), and data loss prevention (DLP) strategies across Microsoft 365 and Azure environments
•   Design threat protection solutions spanning endpoint, email, identity, cloud workload, and data layers
•    Develop security roadmaps that address immediate vulnerabilities while building toward long-term cyber resilience
•    Translate complex technical findings into structured remediation plans with clear priorities, timelines, and ownership
•    Maintain technical documentation including architecture diagrams, configuration baselines, and solution design records

2.  Client Engagement & Technical Advisor

•    Serve as the primary technical point of contact throughout the security engagement lifecycle, from discovery and assessment through deployment and handover
•    Conduct technical workshops, security briefings, and envisioning sessions with IT teams, security leads, CIOs, and CISOs
•    Present security assessment findings, architecture proposals, and risk remediation strategies in clear, business-relevant language
•    Guide clients through security decisions by explaining trade-offs, technical constraints, and recommended approaches
•    Develop technical scoping documents, solution designs, and statements of work that accurately reflect client requirements and engagement complexity
•    Maintain ongoing technical relationships with clients, providing guidance as their environments evolve and new threats emerge

3. Deployment, Configuration & Implementation

•   Hands-on deployment and configuration of security solutions across Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Sentinel, Purview, and Entra ID
•    Configure SIEM rules, detection policies, alert logic, and automated response playbooks within Microsoft Sentinel
•    Implement endpoint protection, vulnerability management, and device compliance policies via Microsoft Intune and Defender for Endpoint
•   Deploy and configure data protection solutions including Microsoft Purview Information Protection, DLP policies, and insider risk management turnaround of proposals and quotations
•    Implement Sophos, Acronis, and Veeam solutions for endpoint security, backup, and disaster recovery in accordance with client requirements
•    Validate deployments through functional testing, security reviews, and post-implementation health checks

4. . Incident Response & Threat Management

•    Monitor client environments for threats, anomalies, and policy violations using SIEM, EDR, and cloud security tooling
•     Lead investigation and containment of security incidents, working methodically through triage, analysis, containment, eradication, and recovery
•    Conduct root cause analysis following incidents and produce structured post-incident reports with clear remediation actions
•    Develop and maintain security playbooks, escalation procedures, and incident response documentation
•   Perform proactive threat hunting activities to identify indicators of compromise before they escalate
•    Support clients in building internal incident response capability through knowledge transfer and documentation

5.  Compliance, Vulnerability Management & Security Assurance

•   Assess client environments against relevant compliance frameworks including ISO 27001, NIST CSF, CIS Controls, GDPR, and applicable local data protection regulations
•    Conduct regular vulnerability assessments, configuration reviews, and security posture evaluations
•    Identify and prioritize remediation actions based on risk severity, exploitability, and business impact
•    Support internal and external audit processes by providing technical evidence, configuration documentation, and security control mappings
•    Implement and validate security hardening benchmarks across operating systems, cloud workloads, and network infrastructure
•    Track remediation progress and provide clients with regular security posture reporting

6. Continuous Improvement & Technical Developmen

•     Stay current with the evolving threat landscape, emerging attack techniques, and security vendor roadmaps
•     Contribute to the development of CPS Uganda's internal security practice; including technical playbooks, configuration standards, and delivery frameworks
•   Share knowledge across the technical team through internal documentation, peer reviews, and informal training
•     Participate in security community engagements, Microsoft technical programs, and relevant industry forums
•    Identify opportunities to improve security delivery efficiency, tooling, and client outcomes based on lessons learned across engagements
•    Drive accountability for underperforming territories, accounts, or market segments through corrective action plans