Senior Cyber Security Engineer (Hybrid)

Overview

Senior Cyber Security Engineer role in Kaplan International's Security Operations team, supporting a multi-year digital transformation programme across the student journey.

What you'll do

• Manage and optimise Microsoft Defender XDR, Defender for Endpoint and Intune for endpoint protection, compliance and threat detection.
• Implement and maintain security controls across AWS, Azure and Microsoft 365 environments.
• Lead and manage enterprise vulnerability management across endpoints, cloud infrastructure and applications using Qualys, Snyk, Orca Security and Microsoft Defender Vulnerability Management, including vulnerability identification, risk prioritisation, remediation tracking and reporting.
• Conduct application security assessments, security architecture reviews and threat modelling, aligned with OWASP Top 10.
• Investigate security incidents, improve detection capabilities and coordinate technical remediation.
• Develop security automation using PowerShell, Python and APIs.
• Collaborate with Cloud, Infrastructure, DevOps and Development teams to embed security best practices.
• Mentor junior engineers and drive continuous security improvements.
• Assess and implement security controls for AI-powered applications, Microsoft Copilot and enterprise AI services, addressing data protection, access controls, prompt injection, model risks and secure AI adoption.

What you'll need

• 5+ years of hands-on cyber security engineering experience.
• Strong experience with Microsoft Defender, Intune, Azure, AWS and M365 security.
• Experience with Orca, Qualys, Snyk or equivalent security platforms.
• Strong understanding of cloud security, vulnerability management and application security.
• Experience with DevSecOps, CI/CD security, OWASP, SAST, DAST and SCA.
• Knowledge of incident response, security monitoring and identity security.
• Scripting experience with PowerShell, Python or similar.
• Familiarity with NIST, CIS Controls and ISO 27001.
• Expertise across the whole IT security spectrum (Software, Servers, Infrastructure, Networks).
• Strong IT security knowledge, and ability to balance business objectives with information security best practices.
• Advanced scripting and automation experience.
• Documenting security incidents, their analysis, and remediation measures, and providing regular updates and reports.
• Identifying, prioritizing, and managing vulnerabilities in systems and applications.
• Strong understanding of vulnerability management, EDR, XDR, DLP, SOC management tooling and other security tools.
• Experience of securing O365 and configuration of Microsoft security tools.
• Working knowledge of public cloud security and protecting SaaS solutions.
• An inquiring mind, can-do, positive attitude, and initiative-taking approach.
• Good organisational and planning skills, and the ability to make decisions independently.

Nice to have

• Certifications: AZ-500, SC-200, SC-100, AWS Security Specialty, CISSP.

Details

• Location: Bangalore, KA, India.
• Hybrid work model.
• Employee type: Employee.