Lead cyber security engineer

Overview

Lead cybersecurity automation engineering for enterprise security operations, threat detection, incident response, vulnerability management, cloud security, and intelligent automation.

What you'll do

• Lead the design, development, deployment, and maintenance of enterprise-wide cybersecurity automation solutions to improve operational efficiency, scalability, and service reliability.
• Develop automation frameworks, API integrations, orchestration workflows, and self-service capabilities to reduce manual effort and streamline security operations.
• Automate SOC processes, including alert enrichment, triage, incident investigation, and remediation.
• Integrate Microsoft Defender, ServiceNow, and third-party security platforms through REST APIs, custom connectors, and automation workflows.
• Build and maintain automated response mechanisms for phishing, malware, account compromise, insider threats, and other cybersecurity incidents.
• Implement threat intelligence enrichment, IOC validation, and contextual analysis workflows.
• Automate vulnerability management processes, including remediation tracking, risk visibility, and reporting.
• Develop cloud security automation solutions for Microsoft Azure using Azure Logic Apps, Azure Functions, Automation Runbooks, and related cloud-native services.
• Improve incident response efficiency and reduce Mean Time to Respond through orchestration, automated containment, and remediation actions.
• Collaborate with SOC analysts, incident responders, security engineers, and business stakeholders to identify automation opportunities and optimize security operations.
• Contribute to enterprise cybersecurity automation strategy, architecture design, technology evaluation, and continuous process improvement initiatives.
• Design, develop, and deploy Agentic AI and intelligent automation solutions, including AI agents, Retrieval-Augmented Generation applications, and autonomous workflows.
• Ensure automation and AI-driven solutions adhere to responsible cybersecurity standards, governance requirements, compliance obligations, and organizational security policies.
• Establish automation best practices, coding standards, governance frameworks, and operational metrics for maintainability, reliability, and scalability.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in Automation Engineering, Cyber Security and Cloud Technologies.
• Strong hands-on experience with Python, PowerShell, Bash, REST APIs, JSON, and YAML.
• Strong hands-on experience with StackStorm, Ansible, ServiceNow, and SOAR platforms.
• Demonstrated knowledge of cybersecurity principles, technologies, and best practices.
• Hands-on experience in web security, infrastructure and platform security, identity and access management, incident response, threat management, and security protocols, including those associated with open-source technologies.
• Strong knowledge of Cloudflare, Burp Suite, Claroty, Delinea, PRISMA - Cloud Security, Qualys, Recorded Future, Microsoft Sentinel, Snowflake, Microsoft Defender XDR, and Microsoft Entra ID.
• Strong knowledge of event-driven architecture, including the integration of traditional applications and data resources.

Nice to have

• Hands-on experience with Agentic AI, Azure OpenAI, Microsoft Copilot Studio, LiteLLM, LangChain, LangGraph, RAG architectures, AI Search, Vector Databases, Prompt Engineering, and AI Agent orchestration frameworks.
• Relevant technical, cybersecurity, automation, and cloud certifications.
• CISSP, CISM, ITIL, Red Hat Ansible Automation, AWS Security Specialty, and other industry-recognized cloud, security, automation, or AI certifications.

Details

• Location: Bangalore, India.
• Employment type: Full-Time.