Role Overview :

As a Staff Security Engineer - Operations, you will be at the forefront of safeguarding our organization's digital assets and infrastructure. Your day-to-day will involve a blend of proactive threat hunting, incident response, vulnerability management, and security architecture review. You will collaborate closely with various teams, including IT operations, software development, and compliance, to ensure security is integrated into every aspect of our business. Your expertise will directly impact the security posture of our organization, protecting our customers, data, and reputation from evolving cyber threats.

Key Responsibilities :

- Lead incident response efforts, including investigation, containment, and remediation of security incidents, to minimize impact and prevent future occurrences.

- Conduct regular penetration testing and vulnerability assessments to identify and address security weaknesses in our systems and applications.

- Develop and maintain security monitoring and alerting systems, leveraging SIEM tools, to detect and respond to suspicious activity in real-time.

- Contribute to the development and implementation of security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements.

- Provide expert guidance and support to IT operations and development teams on security best practices, secure coding, and cloud security.

- Drive the implementation and maintenance of IT disaster recovery plans to ensure business continuity in the event of a major disruption.

- Research and evaluate emerging security threats and technologies to proactively protect our organization from new and evolving risks.

- Develop and deliver security awareness training to employees to promote a security-conscious culture.

Required Skillset :

- Demonstrated expertise in incident response, threat intelligence, penetration testing, and vulnerability management.

- Proven ability to design, implement, and manage security solutions in cloud environments (e.g., AWS, Azure, GCP).

- Strong understanding of SIEM technologies and experience in developing and tuning security monitoring rules and alerts.

- Excellent knowledge of security frameworks and standards (e.g., NIST, ISO 27001, SOC 2).

- Ability to effectively communicate technical concepts to both technical and non-technical audiences.

- Strong analytical and problem-solving skills, with the ability to quickly assess and respond to security incidents.

- Bachelor's degree in Computer Science, Information Security, or a related field. Relevant security certifications (e.g., CISSP, CISM, CEH) are highly desirable.

- Adaptable to a fast-paced environment and comfortable working both independently and as part of a team in Bangalore.