Lead Information Security Engineer - Cyber Ops (Threat Monitoring)

Overview

Lead security monitoring and threat investigations as a senior individual contributor within a Security Operations Center. The role focuses on detecting cyber threats, leading complex incident investigations, and improving security monitoring and detection capabilities.

What you'll do

• Monitor and investigate security alerts across enterprise, cloud, network, endpoint, and identity environments.
• Lead investigations and escalation of high-priority incidents, including malware, phishing, insider threats, ransomware, account compromises, and APTs.
• Correlate security data to identify attack patterns, campaigns, and emerging risks.
• Develop and tune detection rules, use cases, alerting mechanisms, and monitoring logic.
• Collaborate with Incident Response teams during containment, eradication, and recovery.
• Operationalize threat intelligence indicators and adversary techniques.
• Mentor junior SOC analysts and maintain playbooks, procedures, and investigation documentation.

What you'll need

• 8–10 years of cybersecurity experience, including Security Operations, Threat Monitoring, or Incident Detection.
• Expertise in SOC monitoring, incident investigation, and incident response processes.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.
• Expertise with SOAR and EDR/XDR technologies.
• Experience investigating endpoint, network, cloud, identity, and application security incidents.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, threat hunting, IOC analysis, and detection engineering.
• Proficiency in KQL, SPL, SQL, PowerShell, Python, or similar languages.

Details

• Location: Bangalore, India.
• Work mode: Hybrid.