Overview
Intermediate Security Engineer responsible for cybersecurity and IT compliance support, with hands-on incident response and threat management across AWS cloud security, SIEM monitoring, EDR/XDR operations, and AI security risks.
What you'll do
- Monitor, investigate, and respond to security alerts across cloud, endpoint, identity, email, SaaS, and enterprise environments.
- Own incidents from triage through containment, remediation support, documentation, and lessons learned.
- Investigate AWS alerts, suspicious activity, misconfigurations, and potential compromise scenarios using cloud logs and security tooling.
- Work with Microsoft Sentinel to detect, investigate, and correlate threats using SIEM use case tuning and log onboarding.
- Investigate EDR/XDR alerts, perform endpoint triage, validate IOCs, and coordinate remediation support.
- Support monitoring and incident workflows for AI security risks such as unauthorized AI usage, data leakage, and prompt injection.
- Perform structured incident analysis, threat hunting, detection improvement, and automation using SOAR/scripting/query tools.
What you'll need
- 5–7 years of experience in SOC operations, incident response, cloud security, SIEM engineering, EDR/XDR operations, or a related cybersecurity role.
- Hands-on experience with AWS security concepts including IAM, logging, monitoring, network security, encryption, and incident investigation.
- Working knowledge of AWS security services including GuardDuty, Security Hub, CloudTrail, Config, Inspector, IAM, and CloudWatch.
- Experience with SIEM tools, preferably Microsoft Sentinel, including alert investigation, KQL/log analysis, rule tuning, and dashboard/reporting support.
- Experience with EDR/XDR platforms, preferably Microsoft Defender XDR, including endpoint investigation, containment, and remediation coordination.
- Good understanding of incident response lifecycle, threat hunting, and MITRE ATT&CK.
- Basic scripting or query skills using KQL, PowerShell, Python, or similar technologies.
Details
- Work hours: 4 PM to 1 AM IST.
- Relocation assistance: Yes.
Read the full description and apply on the company’s own careers page.
