Security Operations Engineer

Overview

Security Operations Engineer focused on building and maturing security detections, policies, and response logic across the company environment.

What you'll do

• Develop high-fidelity detections and correlation rules in Splunk and related security platforms.
• Build detection use cases across identity, endpoint, network, cloud infrastructure, SaaS, DLP, vulnerabilities, and asset posture.
• Correlate signals from multiple tooling and data sources to detect attacker behavior and material security risk.
• Support incident triage, investigation, containment, and post-incident improvement activities.
• Automate enrichment and response workflows using Python and APIs.
• Tune detections to reduce false positives and improve true positive rates.
• Create playbooks/runbooks and security detection documentation for responders and analysts.

What you'll need

• 6+ years of cybersecurity or a related technical field experience.
• 3+ years of hands-on experience in incident response, detection engineering, security operations, or SIEM engineering.
• Strong hands-on experience with a SIEM platform; direct Splunk experience strongly preferred.
• Knowledge of the incident response lifecycle (triage, scoping, containment, eradication, recovery, post-incident learning).
• Ability to script and automate tasks using Python or a similar language.
• Understanding of networking, systems, cloud, and security principles.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field.

Details

• Expected to work from the Bangalore office (in-office environment).