Security Engineer - II (SOC)

Overview

Security Engineer II (SOC) is a hands-on member of a 24x7 Security Operations Center responsible for monitoring, triaging, and responding to security alerts across the company’s technology environment.

What you'll do

• Provide continuous alert monitoring and response coverage in a rotating 24x7 SOC schedule.
• Triage, investigate, and respond to security alerts from SIEM, EDR, cloud, network, and identity sources.
• Tune detections and alert logic to reduce false positives and improve signal-to-noise.
• Build, test, and maintain detection rules and use cases aligned to MITRE ATT&CK.
• Automate alert triage and response using AI agents and SOAR workflows/playbooks.
• Define, track, and report SOC metrics such as MTTD and MTTR.
• Support vulnerability management through scanning, analysis, and remediation coordination.

What you'll need

• 4–6 years of experience in security operations, security engineering, incident response, or related roles.
• Willingness to work in a 24x7 SOC on a rotating shift schedule, including nights, weekends, and holidays.
• Hands-on experience with alert triage, investigation, and incident response in a SOC environment.
• Experience building and tuning detections in SIEM/EDR platforms; familiarity with MITRE ATT&CK.
• Experience with SOAR platforms and building automated playbooks; exposure to AI agents or LLM-based automation is strongly preferred.
• Knowledge of cloud security across AWS, GCP, and Azure and their logging services.
• Ability to script or automate (Python, Bash, or equivalent) is preferred.

Details

• Location: Bangalore HQ.
• Work schedule: rotating shifts with night shifts, weekends, and holidays.