Senior Security Operations Engineer

Overview

Senior Security Operations Engineer responsible for engineering and improving enterprise Attack Surface and Vulnerability Management capabilities. The role covers exposure discovery, risk prioritization, remediation, Zero Trust, secrets security, detection engineering, and security automation.

What you'll do

• Engineer Attack Surface and Vulnerability Management across cloud, infrastructure, endpoints, applications, and internet-facing environments.
• Discover and correlate unknown, unmanaged, stale, and externally exposed assets.
• Prioritize vulnerabilities using asset criticality, exposure, exploitability, threat intelligence, and compensating controls.
• Establish remediation workflows and SLAs with asset owners.
• Operate and troubleshoot Zscaler ZIA/ZPA and Zero Trust controls.
• Develop SIEM detections, support threat hunting, and investigate incidents.
• Automate asset enrichment, vulnerability triage, remediation tracking, integrations, and reporting.

What you'll need

• 7+ years of cybersecurity experience.
• Hands-on experience in Security Operations, Attack Surface Management, Vulnerability Management, or Exposure Management.
• Experience with Tenable, Qualys, Wiz, Prisma Cloud, or similar platforms.
• Strong fundamentals in networking, operating systems, identity, and cloud infrastructure.
• Experience with Python, PowerShell, REST APIs, or similar automation technologies.
• Strong troubleshooting, analytical, collaboration, and remediation-influence skills.
• Experience with vulnerability lifecycle management, risk prioritization, remediation, and validation.

Nice to have

• Experience in Zero Trust, secrets security, SIEM, threat hunting, incident response, SOAR, cloud security, Product Security, DevSecOps, or EASM.
• Relevant CISSP, CISM, GIAC, cloud security, or Zscaler certifications.

Details

• Location: Bangalore, India.
• Primarily in-office; expected to work from the Bangalore office.