Senior Security Operations Engineer

Overview

Senior Security Operations Engineer responsible for operating and engineering security capabilities across detection and response, cloud, identity, endpoint, vulnerability management, and AI security. The role combines operational incident work with automation, detection engineering, and security program ownership.

What you'll do

• Own alert triage, investigation, containment, and threat hunting.
• Manage SIEM log onboarding, normalization, retention, and detection rules.
• Build automated enrichment, triage, response, and containment workflows.
• Run vulnerability management, asset tracking, penetration testing, and remediation follow-up.
• Operate cloud security, EDR, secrets management, and identity security capabilities.
• Configure AI-channel DLP, shadow-AI controls, and AI security assessments.
• Produce security metrics, audit evidence, runbooks, and continuity documentation.

What you'll need

• 5–8 years of hands-on security operations experience.
• Incident triage, investigation, and containment experience.
• Practical SIEM detection engineering and log-source onboarding experience.
• Public cloud security experience with AWS, Azure, or GCP, plus Kubernetes knowledge.
• Hands-on EDR operation and vulnerability management experience.
• Python, REST API, and Terraform automation skills.
• Knowledge of identity security, NIST CSF, AI-assisted security, and technical documentation.

Nice to have

• SOAR, CNAPP/CSPM, DLP/CASB/SSE, threat hunting, PAM, email security, or MDM experience.
• Detection-as-code, MITRE ATT&CK, purple-team, backup-security, or AI/LLM security experience.
• Relevant security certifications or a bachelor's degree in Computer Science, Information Security, or a related field.

Details

• Location: Bangalore, India.
• Supports a follow-the-sun coverage model.