<ins>Key Responsibilities</ins>

<ul>
<li>SOC Leadership: Oversee day-to-day SOC activities – monitoring alerts, triaging incidents, and coordinating escalations while acting as the primary point of contact during EST business hours.. </li>
</ul>

<ul>
<li>Automation &amp; Efficiency: Identify repetitive operational tasks and architect automated solutions using Python, Bash, or PowerShell. Build custom integrations between security tools to ensure seamless data flow that supports 24/7 global operations.. </li>
</ul>

<ul>
<li>Incident Response: Own the incident response lifecycle: detection, containment, investigation, remediation, and lessons learned, managing independent execution during US hours and coordinating handovers. </li>
</ul>

<ul>
<li>Mentorship: Provide mentorship and career development opportunities to junior staff, utilizing a mix of synchronous sessions during overlap windows and asynchronous methods like video walkthroughs and ticket reviews ensuring expertise in areas like cloud security and incident response. </li>
</ul>

<ul>
<li>Cloud Security &amp; DevOps: Work closely with infrastructure and DevOps teams to secure cloud deployments (e.g., containers, CI/CD pipelines). Advocate for secure coding practices and automated security testing. </li>
</ul>

<ul>
<li>Vulnerability Management: Oversee vulnerability management programs – from scanning and assessment through remediation tracking and reporting. </li>
</ul>

<ul>
<li>Continuous Improvement: Drive continuous improvements in processes and procedures, including the standardization of global handoff protocols and operational runbooks for remote and hybrid teams. </li>
</ul>

<ins>Core Capability Areas</ins> 

<ul>
<li>Security Engineering &amp; Automation: Systematically reducing manual “toil” by scripting workflows, integrating APIs, and deploying orchestration to accelerate detection and response across the global security stack. </li>
</ul>

<ul>
<li>SOC Operations: Providing 24/7 vigilance through continuous monitoring, alert triage, and systematic tuning of the security stack to eliminate blind spots to ensure seamless coverage. </li>
</ul>

<ul>
<li>Vulnerability Management: Reducing the attack surface through continuous asset discovery, risk-based scanning, and coordinated remediation of security flaws. </li>
</ul>

<ul>
<li>Incident Response: Minimizing business impact by maintaining rapid forensic investigation, containment, and recovery capabilities. </li>
</ul>

<ul>
<li>Offensive Security: Validating defense effectiveness by simulating real-world attacks through rigorous penetration testing and red-teaming exercises. </li>
</ul>

<ul>
<li>Threat Intelligence: Driving proactive defense by analyzing global threat trends and OSINT to anticipate and neutralize targeted attack campaigns. </li>
</ul>

<ul>
<li>Insider Threat Management: Detecting and preventing internal risks through behavioral analytics and strategic data loss prevention protocols. </li>
</ul>

<ins>About You</ins> 

<ul>
<li>Experience: 5–7+ years of combined IT and security experience in Security Operations in a lead capacity. </li>
</ul>

<ul>
<li>Technical Expertise: </li>
</ul>

<ul>
<li>Deep understanding of threat detection, vulnerability management, incident response, and enterprise security controls. </li>
</ul>

<ul>
<li>Automation: Proven ability to write scripts (Python, PowerShell, Bash) and automate security workflows to improve efficiency. </li>
</ul>

<ul>
<li>Security Stack: Familiarity with SIEM, EDR, NDR, WAF, and DLP technologies. </li>
</ul>

<ul>
<li>Infrastructure: Familiarity with modern infrastructure (cloud platforms, containerization, CI/CD pipelines). </li>
</ul>

<ul>
<li>Soft Skills: Excellent communication skills – able to manage and mentor team members across varying shifts and convey complex concepts to both technical and non-technical stakeholders. </li>
</ul>

<ul>
<li>Education: Bachelor’s degree in Computer Science, Information Systems, or related field preferred (or equivalent experience). </li>
</ul>

<ul>
<li>Certifications: Relevant security certifications (e.g., CISSP, GIAC, CISM, OSCP) are highly desirable. </li>
</ul>

Senior Security Engineer

India

Key Responsibilities SOC Leadership: Oversee day-to-day SOC activities – monitoring alerts, triaging incidents, and coordinating escalations while acting as the primary point of contact during EST business hours.. Automation &amp; Efficiency: Identify repetitive operational tasks and architect automated solutions using Python, Bash, or PowerShell. Build custom integrations between security tools to ensure seamless data flow that supports 24/7 global operations.. Incident Response: Own the incident response lifecycle: detection, containment, investigation, remediation, and lessons learned, managing independent execution during US hours and coordinating handovers. Mentorship: Provide mentorship and career development opportunities to junior staff, utilizing a mix of synchronous sessions during overlap windows and asynchronous methods like video walkthroughs and ticket reviews ensuring expertise in areas like cloud security and incident response. Cloud Security &amp; DevOps: Work closely with infrastructure and DevOps teams to secure cloud deployments (e.g., containers, CI/CD pipelines). Advocate for secure coding practices and automated security testing. Vulnerability Management: Oversee vulnerability management programs – from scanning and assessment through remediation tracking and reporting. Continuous Improvement: Drive continuous improvements in processes and procedures, including the standardization of global handoff protocols and operational runbooks for remote and hybrid teams. Core Capability Areas Security Engineering &amp; Automation: Systematically reducing manual “toil” by scripting workflows, integrating APIs, and deploying orchestration to accelerate detection and response across the global security stack. SOC Operations: Providing 24/7 vigilance through continuous monitoring, alert triage, and systematic tuning of the security stack to eliminate blind spots to ensure seamless coverage. Vulnerability Management: Reducing the attack surface through continuous asset discovery, risk-based scanning, and coordinated remediation of security flaws. Incident Response: Minimizing business impact by maintaining rapid forensic investigation, containment, and recovery capabilities. Offensive Security: Validating defense effectiveness by simulating real-world attacks through rigorous penetration testing and red-teaming exercises. Threat Intelligence: Driving proactive defense by analyzing global threat trends and OSINT to anticipate and neutralize targeted attack campaigns. Insider Threat Management: Detecting and preventing internal risks through behavioral analytics and strategic data loss prevention protocols. About You Experience: 5–7+ years of combined IT and security experience in Security Operations in a lead capacity. Technical Expertise: Deep understanding of threat detection, vulnerability management, incident response, and enterprise security controls. Automation: Proven ability to write scripts (Python, PowerShell, Bash) and automate security workflows to improve efficiency. Security Stack: Familiarity with SIEM, EDR, NDR, WAF, and DLP technologies. Infrastructure: Familiarity with modern infrastructure (cloud platforms, containerization, CI/CD pipelines). Soft Skills: Excellent communication skills – able to manage and mentor team members across varying shifts and convey complex concepts to both technical and non-technical stakeholders. Education: Bachelor’s degree in Computer Science, Information Systems, or related field preferred (or equivalent experience). Certifications: Relevant security certifications (e.g., CISSP, GIAC, CISM, OSCP) are highly desirable.

Senior Security Engineer · Gurugram

Job highlights

Skillset required

Job Description

Job Description for Senior Security Engineer

More at GERSON