Security Operations Engineer

Overview

Security Operations and Threat Hunter role in FalconX's Security Operations Center, responsible for proactive threat hunting, incident analysis and protection of on-premise and cloud infrastructure, with growth into engineering projects and AI-driven security automation.

What you'll do

• Monitor, detect, and respond to security incidents across on-premise and cloud environments.
• Analyze security alerts from security tools to identify potential threats.
• Conduct forensic investigations and deep-dive analysis of security events to identify trends, attack techniques, and areas for improvement.
• Conduct proactive threat hunting across endpoint, network, and cloud environments to identify sophisticated cyber threats.
• Analyze security logs, behavioral patterns, and anomalies to detect indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).
• Investigate security incidents, perform forensic analysis, and provide actionable recommendations for mitigation and remediation.
• Develop and refine threat hunting methodologies, leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Automate threat detection and analysis using scripting languages such as Python, PowerShell, or Bash.
• Continuously monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies.

What you'll need

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).
• 3+ years of experience in security operations, threat hunting, or a similar cybersecurity role.
• Experience working with log data for detection and response across Cloud, EDR, Network, and related telemetry.
• Experience developing and deploying effective detection rules (e.g., YARA, Sigma, SQL-based rules, Network signatures).
• Strong understanding of network security monitoring, packet analysis, and log correlation.
• Deep understanding of advanced threat detection methodologies and threat intelligence.
• Proficiency in analyzing attacker tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.
• Proficiency in scripting and automation for security operations (Python, PowerShell, or Bash).
• Solid understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence.
• Strong communication skills, an inquisitive mindset, and the confidence to ask questions, challenge assumptions, and collaborate across teams.

Details

• Based in Bangalore; on-site at the Bangalore office during local daytime business cycles, with flexible remote arrangements during global and US-aligned cycles.
• Structured quarterly time-zone rotation through San Francisco/PST, New York/EST, and local daytime business hours.
• Shared participation in rotational weekend on-call pager duty to triage critical incidents.