Security Engineer III -SOC

Overview

Security Engineer III focused on the Security Operations Center (SOC). You will design, build, and enhance security capabilities for threat detection, investigation, and response.

What you'll do

• Manage the SIEM platform, onboard and normalize log sources, and ensure high-fidelity data pipelines.
• Build and maintain detections using Detection as Code with version control, peer review, and automated testing.
• Develop and maintain SOAR workflows and playbooks to improve alert triage, enrichment, and response.
• Investigate and implement AI/ML to support security operations such as alert triage and detection enrichment.
• Integrate threat intelligence into detection logic, SOAR playbooks, and threat hunting activities.
• Conduct proactive, hypothesis-driven threat hunts and support incident response investigations.

What you'll need

• Extensive experience in security engineering, DevSecOps, or a related role, especially for cloud-native environments.
• Practical experience developing and tuning SIEM detections and writing threat hunting queries.
• Proficiency administering SIEM tools (e.g., Splunk, Microsoft Sentinel) and other security tools for detection/response workflows.
• Familiarity with threat intelligence platforms/feeds (e.g., MISP, Recorded Future, VirusTotal).
• Proficiency in scripting/programming languages such as Python, Go, or Bash for automation.
• Knowledge of security frameworks/standards including MITRE ATT&CK and compliance standards like SOC 2 or ISO 27001.

Details

• Location: Gurugram, India.