Security Operations Engineer

Overview

Zendesk is hiring a Security Operations Engineer for its Cyber Security team in Pune. The role protects Zendesk, its products and customers by monitoring, investigating and responding to security threats, combining hands-on SOC work with threat hunting, incident response, cloud security, DLP investigations and continuous improvement of security tools and automation.

What you'll do

• Serve as a primary incident responder for critical security alerts and incidents across enterprise infrastructure, product offerings and client environments.
• Leverage enterprise security platforms to perform threat analysis, examine security incidents and execute daily operational response workflows.
• Conduct proactive threat hunts to identify visibility gaps and support deeper investigations.
• Analyze Data Loss Prevention alerts, assess data-exfiltration risks and assist with complex forensic analysis.
• Collaborate with audit and compliance partners to respond to regulatory inquiries.
• Lead cross-functional tabletop simulations with key internal stakeholders.
• Stay current on emerging threats and attacker tactics, techniques and procedures (TTPs) observed across devices and end-user systems.
• Lead or manage technical cybersecurity investigations, including triage, scoping, containment and documentation.
• Contribute to the development and operation of automation and orchestration tools that reduce manual effort and improve response consistency.
• Leverage artificial intelligence responsibly to enhance security orchestration, accelerate investigation workflows and assist with building AI capabilities.
• Collaborate with Security Engineering partners to enhance operational monitoring, threat detection and incident response mechanisms.
• Collaborate with the Threat Intelligence team and the broader security community to build relationships and share knowledge.
• Partner with internal stakeholders and business partners to explain major security incidents and implement actionable risk mitigation strategies.
• Take on expanding responsibilities and work effectively in dynamic, rapidly evolving environments.
• Join the global cyber security on-call rotation and provide regional APAC coverage through scheduled operational shifts, currently 6:00 a.m.–3:00 p.m. IST and 9:00 a.m.–6:00 p.m. IST, on a rotational basis.

What you'll need

• Bachelor's degree in Computer Science or a related field.
• 7+ years of experience in cybersecurity, SOC, incident response or threat hunting.
• Strong analytical and problem-solving skills, with the ability to interpret security metrics, user behavior and event patterns.
• A team-first and collaborative approach.
• Excellent written, verbal and presentation skills, with the ability to explain complex investigations, incidents, cyber threats and recommended actions to business stakeholders.
• A strong security and analytical mindset, with the ability to think strategically about evolving threats to a customer-service platform, including risks introduced by AI and automation.
• Experience with SIEM, SOAR and other log-aggregation tools such as QRadar, Splunk or ArcSight.
• Experience investigating DLP and User and Entity Behavior Analytics (UEBA) alerts, with a good understanding of network, proxy, firewall, cloud, Windows and macOS logs.
• Good understanding of cloud infrastructure and cloud security alerts.

Nice to have

• Cybersecurity certifications such as CEH, CHFI, AWS Certified Security Specialist, Microsoft Azure SC-200 or Google Professional Cloud Security Engineer.
• Certifications such as GCIH, GPEN, GCFR, GREM, GCFA, CISSP or CISM.
• Hands-on experience building automated security workflows and AI-powered security capabilities.

Details

• Hybrid role based in the Pune office; the role must attend the local office for part of the week, with the in-office schedule set by the hiring manager.
• Zendesk can only hire candidates who are physically located and plan to work from Karnataka or Maharashtra.
• Regional APAC coverage through rotational shifts of 6:00 a.m.–3:00 p.m. IST and 9:00 a.m.–6:00 p.m. IST.