<ins>Key Responsibilities</ins>

<ul>
<li>SOC Leadership: Oversee day-to-day SOC activities – monitoring alerts, triaging incidents, and coordinating escalations while acting as the primary point of contact during EST business hours.. </li>
</ul>

<ul>
<li>Automation &amp; Efficiency: Identify repetitive operational tasks and architect automated solutions using Python, Bash, or PowerShell. Build custom integrations between security tools to ensure seamless data flow that supports 24/7 global operations.. </li>
</ul>

<ul>
<li>Incident Response: Own the incident response lifecycle: detection, containment, investigation, remediation, and lessons learned, managing independent execution during US hours and coordinating handovers. </li>
</ul>

<ul>
<li>Mentorship: Provide mentorship and career development opportunities to junior staff, utilizing a mix of synchronous sessions during overlap windows and asynchronous methods like video walkthroughs and ticket reviews ensuring expertise in areas like cloud security and incident response. </li>
</ul>

<ul>
<li>Cloud Security &amp; DevOps: Work closely with infrastructure and DevOps teams to secure cloud deployments (e.g., containers, CI/CD pipelines). Advocate for secure coding practices and automated security testing. </li>
</ul>

<ul>
<li>Vulnerability Management: Oversee vulnerability management programs – from scanning and assessment through remediation tracking and reporting. </li>
</ul>

<ul>
<li>Continuous Improvement: Drive continuous improvements in processes and procedures, including the standardization of global handoff protocols and operational runbooks for remote and hybrid teams. </li>
</ul>

<ins>Core Capability Areas</ins> 

<ul>
<li>Security Engineering &amp; Automation: Systematically reducing manual “toil” by scripting workflows, integrating APIs, and deploying orchestration to accelerate detection and response across the global security stack. </li>
</ul>

<ul>
<li>SOC Operations: Providing 24/7 vigilance through continuous monitoring, alert triage, and systematic tuning of the security stack to eliminate blind spots to ensure seamless coverage. </li>
</ul>

<ul>
<li>Vulnerability Management: Reducing the attack surface through continuous asset discovery, risk-based scanning, and coordinated remediation of security flaws. </li>
</ul>

<ul>
<li>Incident Response: Minimizing business impact by maintaining rapid forensic investigation, containment, and recovery capabilities. </li>
</ul>

<ul>
<li>Offensive Security: Validating defense effectiveness by simulating real-world attacks through rigorous penetration testing and red-teaming exercises. </li>
</ul>

<ul>
<li>Threat Intelligence: Driving proactive defense by analyzing global threat trends and OSINT to anticipate and neutralize targeted attack campaigns. </li>
</ul>

<ul>
<li>Insider Threat Management: Detecting and preventing internal risks through behavioral analytics and strategic data loss prevention protocols. </li>
</ul>

<ins>About You</ins> 

<ul>
<li>Experience: 5–7+ years of combined IT and security experience in Security Operations in a lead capacity. </li>
</ul>

<ul>
<li>Technical Expertise: </li>
</ul>

<ul>
<li>Deep understanding of threat detection, vulnerability management, incident response, and enterprise security controls. </li>
</ul>

<ul>
<li>Automation: Proven ability to write scripts (Python, PowerShell, Bash) and automate security workflows to improve efficiency. </li>
</ul>

<ul>
<li>Security Stack: Familiarity with SIEM, EDR, NDR, WAF, and DLP technologies. </li>
</ul>

<ul>
<li>Infrastructure: Familiarity with modern infrastructure (cloud platforms, containerization, CI/CD pipelines). </li>
</ul>

<ul>
<li>Soft Skills: Excellent communication skills – able to manage and mentor team members across varying shifts and convey complex concepts to both technical and non-technical stakeholders. </li>
</ul>

<ul>
<li>Education: Bachelor’s degree in Computer Science, Information Systems, or related field preferred (or equivalent experience). </li>
</ul>

<ul>
<li>Certifications: Relevant security certifications (e.g., CISSP, GIAC, CISM, OSCP) are highly desirable. </li>
</ul>

Senior Security Engineer

Key Responsibilities SOC Leadership: Oversee day-to-day SOC activities – monitoring alerts, triaging incidents, and coordinating escalations while acting as the primary point of contact during EST business hours.. Automation &amp; Efficiency: Identify repetitive operational tasks and architect automated solutions using Python, Bash, or PowerShell. Build custom integrations between security tools to ensure seamless data flow that supports 24/7 global operations.. Incident Response: Own the incident response lifecycle: detection, containment, investigation, remediation, and lessons learned, managing independent execution during US hours and coordinating handovers. Mentorship: Provide mentorship and career development opportunities to junior staff, utilizing a mix of synchronous sessions during overlap windows and asynchronous methods like video walkthroughs and ticket reviews ensuring expertise in areas like cloud security and incident response. Cloud Security &amp; DevOps: Work closely with infrastructure and DevOps teams to secure cloud deployments (e.g., containers, CI/CD pipelines). Advocate for secure coding practices and automated security testing. Vulnerability Management: Oversee vulnerability management programs – from scanning and assessment through remediation tracking and reporting. Continuous Improvement: Drive continuous improvements in processes and procedures, including the standardization of global handoff protocols and operational runbooks for remote and hybrid teams. Core Capability Areas Security Engineering &amp; Automation: Systematically reducing manual “toil” by scripting workflows, integrating APIs, and deploying orchestration to accelerate detection and response across the global security stack. SOC Operations: Providing 24/7 vigilance through continuous monitoring, alert triage, and systematic tuning of the security stack to eliminate blind spots to ensure seamless coverage. Vulnerability Management: Reducing the attack surface through continuous asset discovery, risk-based scanning, and coordinated remediation of security flaws. Incident Response: Minimizing business impact by maintaining rapid forensic investigation, containment, and recovery capabilities. Offensive Security: Validating defense effectiveness by simulating real-world attacks through rigorous penetration testing and red-teaming exercises. Threat Intelligence: Driving proactive defense by analyzing global threat trends and OSINT to anticipate and neutralize targeted attack campaigns. Insider Threat Management: Detecting and preventing internal risks through behavioral analytics and strategic data loss prevention protocols. About You Experience: 5–7+ years of combined IT and security experience in Security Operations in a lead capacity. Technical Expertise: Deep understanding of threat detection, vulnerability management, incident response, and enterprise security controls. Automation: Proven ability to write scripts (Python, PowerShell, Bash) and automate security workflows to improve efficiency. Security Stack: Familiarity with SIEM, EDR, NDR, WAF, and DLP technologies. Infrastructure: Familiarity with modern infrastructure (cloud platforms, containerization, CI/CD pipelines). Soft Skills: Excellent communication skills – able to manage and mentor team members across varying shifts and convey complex concepts to both technical and non-technical stakeholders. Education: Bachelor’s degree in Computer Science, Information Systems, or related field preferred (or equivalent experience). Certifications: Relevant security certifications (e.g., CISSP, GIAC, CISM, OSCP) are highly desirable.

Senior Security Engineer in Gurugram

Job highlights

Skillset required

Job Description

Job Description for Senior Security Engineer

Explore More Opportunities