Security Engineer

Overview

The Senior Security Engineer will build and operate security observability capabilities across SaaS applications, homegrown applications, cloud environments, and endpoints. The role converts security requirements into scalable monitoring, identifies configuration drift and control failures, integrates telemetry from security platforms, automates remediation workflows, and provides technical guidance to other team members.

What you'll do

• Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints.
• Translate security requirements into measurable configuration baselines and monitoring controls.
• Use AI and create agents to help automate processes and tasks.
• Understand security architecture and where risks are presented in a security review.
• Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems.
• Determine which telemetry can be centralised in tools and design solutions for remaining coverage gaps.
• Develop dashboards showing configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items.
• Create and tune monitoring rules to improve detection accuracy and reduce false positives.
• Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure.
• Lead onboarding of critical and high-risk applications into the monitoring programme.
• Partner with application owners to remediate findings and validate that risks have been resolved.
• Support remediation campaigns and measure risk reduction across participating applications.
• Escalate critical, high-risk, or overdue findings according to established security standards.
• Partner with AI security teams, consulting teams, ID&R, identity, cloud security, software security, privacy, and other specialist teams.
• Document architectures, data flows, monitoring coverage, control logic, operational procedures, and technical decisions.
• Mentor less-experienced engineers and serve as a technical backup to the Observability Technical Lead.
• Develop and execute software and operational security controls, defences, and countermeasures.
• Perform vulnerability and risk assessments, threat analysis, and security code reviews.
• Research and evaluate cybersecurity threats and perform root cause analysis.
• Provide security software engineering recommendations and resolve integration and testing issues with Cisco BUs.
• Determine and implement security hardening for software, infrastructure, and build environments.
• Build standardised security requirements and produce metrics to report performance against those requirements.
• Detect and mitigate security risks, and lead or participate in security architecture and design review meetings.

What you'll need

• Strong experience in security engineering, security architecture, security observability, AI, application security, cloud security, vulnerability management, or security operations.
• Experience integrating security platforms through APIs, connectors, webhooks, or event-driven workflows.
• Hands-on experience with SIEM, SSPM, cloud security, AI, asset inventory, or workflow automation platforms.
• Working knowledge of SaaS security configurations, cloud services, Kubernetes, identity controls, logging, vulnerabilities, and application architectures.
• Ability to automate workflows using Python, APIs, Tines, or comparable technologies.
• Experience translating security requirements into technical monitoring and validation logic.
• Strong troubleshooting, documentation, stakeholder management, and risk analysis skills.
• Ability to independently lead complex technical work from discovery through production implementation.

Nice to have

• Experience with Axonius, Wiz, Splunk, Jira, ServiceNow, and/or Tines.
• Experience building security dashboards and normalising data across multiple sources.
• Knowledge of endpoint security and monitoring local AI models, agents, MCP usage, and AI-assisted development tools.
• Experience with root-cause correlation, automated remediation validation, and configuration-drift monitoring.
• Familiarity with AI security risks and production AI monitoring.

Details

• Location: Bangalore, India.