{"id":3388754,"url":"https://alion.io/job/gainsight-staff-security-operations-engineer","title":"Staff Security Operations Engineer","company":{"id":2860,"name":"Gainsight","domain":"gainsight.com","url":"https://alion.io/company/gainsight","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India","Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":58000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"DLP","optional":true},{"name":"Docker","optional":true},{"name":"Kubernetes","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Red Teaming","optional":true},{"name":"Wiz","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-28T06:00:27Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-06T02:56:13Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"We’re building the AI-driven future of customer success, from retention to growth!\nWe’re building the AI-driven future of customer success, from retention to growth! Gainsight is the AI-powered retention engine behind the world’s most customer-centric companies. The Gainsight CustomerOS platform orchestrates the customer journey from onboarding to outcomes to advocacy. More than 2,000 companies trust Gainsight’s applications and AI agents to drive learning, adoption, community connection, and success for their customers. To explore how our suite of solutions is shaping the future of customer success, check out the link.\nAbout This Role:\nWe’re looking for a full-time Staff Security Operations Engineer to join our Security team reporting to the Senior Manager, AI Response & Threat. This role is a hybrid role based out of our Hyderabad, India.\nIn this role, you'll play a key role in driving the strategy, engineering, and operational maturity of our security operations program by setting technical standards, architecting detection strategy, leading major incident response, and mentoring analysts and engineers. This is a great opportunity for someone who thrives in a fast-growing, cloud-first environment and enjoys working cross-functionally with teams like DevOps, Engineering, and IT. The ideal candidate brings strong skills in incident response leadership, SIEM, EDR, and SOAR platforms, and cloud security architecture.\n What You'll Do:\nExperience owning complex or high-severity incidents end-to-end, from initial triage through containment, remediation, and post-incident review, while keeping stakeholders informed throughout\n\nDeep familiarity with security considerations across AWS, Azure, or GCP environments, including how detection and response strategies need to adapt to cloud-native infrastructure\n\nStaff incident response for significant security events: scoping and containment through to post-incident review. You will conduct host, network, and memory forensics yourself and produce clear, accurate reporting for both technical and non-technical stakeholders.\n\nComfortable working closely with DevOps and Engineering teams to embed security controls directly into infrastructure, CI/CD pipelines, and system design, rather than layering security on after the fact\n\nInvested in developing the skills and judgment of analysts and engineers on the team, helping the broader group operate with greater independence and technical depth over time\n\nAble to translate complex technical findings into clear, actionable insight for executive leadership, customers, or other non-technical stakeholders, especially under the pressure of an active incident\n\nExperienced in assessing, selecting, and integrating security tools (SIEM, EDR, SOAR, cloud-native platforms) in a way that improves coverage without adding unnecessary complexity or cost\n\nThis role may require occasional travel (up to 10-20%) for team meetings, training, or company events. This is not a complete list of responsibilities, and the scope of the role may evolve with the needs of the team and business.\n What We're Looking For:\n6+ years of experience in security operations, with progressive responsibility across triage, incident response, and detection engineering\n\nProven experience leading or mentoring a team, formally or informally, including technical guidance and coaching\n\nDeep expertise with SIEM, EDR, and SOAR platforms, including hands-on rule-writing, tuning, and automation development\n\nStrong incident response leadership experience, including managing complex or high-severity incidents end-to-end\n\nSolid understanding of cloud security architecture (AWS, Azure, or GCP), and experience working with DevOps and Engineering to embed security into CI/CD pipelines and infrastructure\n\nScripting or automation proficiency (Python, PowerShell, or similar) to build and scale response workflows\n\nDeep familiarity with attacker tactics and techniques (MITRE ATT&CK) and how to translate them into detection logic\n\nExcellent communication skills, with the ability to brief executives and technical teams alike during incidents and planning discussions\n\n Nice-to-have skills or experience:\nHands-on experience with cloud-native detection and posture tools (e.g., AWS GuardDuty, Azure Sentinel, Wiz, Prisma Cloud)\n\nFamiliarity with container and orchestration security (Docker, Kubernetes) and associated attack surfaces\n\nExperience with threat intelligence platforms and proactive threat hunting using frameworks like MITRE ATT&CK or Sigma rules\n\nExposure to purple team or adversary simulation exercises (e.g., Atomic Red Team, Caldera) to validate detection coverage\n\nRelevant certifications (e.g., GCIH, GCFA, GCTI, CISSP, OSCP)\n\nWorking knowledge of network security architecture, including segmentation, zero trust principles, and cloud network security groups\n\nExperience with vulnerability management programs, including scanning, prioritization, and remediation tracking\n\nExperience working with data loss prevention (DLP) tools and insider threat detection\n\nWhy You’ll Love It Here:\nGainsight is a place where innovation is shaped through collaboration, curiosity, and a shared focus on solving real-world problems. With a growing suite of products across customer success, product experience, community, education, and AI-powered relationship intelligence, we continue to evolve with the needs of our customers. When people with diverse strengths, a strong sense of community, and true passion for our mission come together, they drive greater impact and create lasting value. What underpins it all is a culture that offers the stability, trust, and support that people need - not just to do the job, but to show up as themselves and feel connected to the work they do. Gainsters love working here for several reasons. Here are a few:\nOur Compensation and Benefits: At Gainsight, we believe great work happens when teammates feel fully supported.\nWe offer a comprehensive benefits package including full health coverage (including OPD), wellness and mental health resources, flexible remote work options, and childcare assistance. You'll also enjoy dedicated Recharge Holidays - one long weekend each quarter to relax and reset.\n\nOur Core Values: We are guided by our values and our mission to be living proof you can win in business while being Human-First. Learn morehere.\nOur Growth Opportunities: From mentoring to career development opportunities, we’re passionate about helping our teammates learn, grow, and thrive.\nOur Parody Videos: No explanation needed. Just watch themhere!\nIf this sounds like the right role for you, we’d love to hear from you.\nAdditional Information:\nWe’re committed to creating an inclusive, fair, and transparent hiring process. As an equal opportunity employer, we celebrate diversity and are committed to creating a welcoming experience for all candidates.\nIf you require accommodations or have questions about how your personal data will be used during the hiring process, please contact .\nIf you’re applying for a role through an Employer of Record (EOR) or contractor arrangement, please note that employment terms and benefits are managed by the EOR or may not apply to non-EOR contractors.","description_format":"text","description_chars":7262,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Company events","Growth opportunities"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["CRM Software","Customer & Retention Analytics","Customer Support & Help Desk Software"],"lifecycle":[{"event":"open","at":"2026-10-28T09:06:47Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":8,"expected_fill_days":34,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/gainsight-staff-security-operations-engineer","json_url":"https://alion.io/job/gainsight-staff-security-operations-engineer.json","meta":{"generated_at":"2026-11-06T06:58:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12363,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2860},"rest":"https://alion.io/mcp/rest/get_company?id=2860"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgainsight-staff-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgainsight-staff-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgainsight-staff-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gainsight-staff-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgainsight-staff-security-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3388754}},{"tool":"search_jobs","arguments":{"company":"gainsight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3388754},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}