{"id":2417364,"url":"https://alion.io/job/glg-senior-security-engineer","title":"Senior Security Engineer","company":{"id":58591,"name":"GLG","domain":"glginsights.com","url":"https://alion.io/company/glg","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":14,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-29T15:13:38Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-13T18:07:37Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"About the role:\nWorking hours: Aligned to US Eastern business hours (approximately 09:00 to 18:00 ET), Monday to Friday. \nWe are looking to hire a Senior Security Engineer to own GLG's threat detection and incident response capability during US business hours. This is a senior individual contributor role, reporting to Nick Franzi. The successful candidate will be the firm's primary subject matter expert for detection engineering, security operations, and incident response: responsible for ensuring threats are identified early, investigated thoroughly, and resolved with durable outcomes. \nThis individual will build and maintain the systems, processes, and playbooks that underpin GLG's operational security posture. They will work closely with IT, engineering, legal, and business teams across the firm, as well as dedicated platform SMEs within the Information Security team, and will serve as the primary point of escalation for active security events during US business hours. \nWhat you'll do:\nThreat detection and incident response \nOperate and contribute to the improvement of GLG's detection capability across SIEM, EDR, and email security platforms during US business hours: working with platform SMEs to tune detection logic, surface threats early, and maintain high signal fidelity. \nLead incident response end to end within US operational coverage: scope, contain, eradicate, and document. Produce post-incident reviews that drive lasting remediation. \nAuthor and maintain response playbooks that enable consistent, decisive action across incident scenarios, coordinating handoffs with global team members where applicable. \nServe as the firm's primary US-hours escalation point for active security events. \nVulnerability and exposure management \nExecute vulnerability scanning across endpoints, servers, and cloud assets; apply risk-based prioritization and drive remediation with US-based and global asset owners to defined SLAs. \nTrack and report on the firm's exposure posture over time, translating technical findings into actionable reporting for leadership. \nContribute to the firm's external attack surface management program. \nServe as the security reviewer for new services, platforms, and major changes: assess designs, model threats, identify the handful of issues that actually matter, and negotiate practical mitigations with engineering teams. \nIdentity threat monitoring \nMonitor identity-layer telemetry during US business hours for threats, anomalies, and policy violations: with particular focus on account compromise and insider risk scenarios. \nSupport access reviews, MFA enforcement operations, and anomalous access investigation across the US user base and beyond. \nSecurity platform operations \nServe as a day-to-day operator across core security platforms - EDR, SIEM, email security, and DLP tooling - working alongside platform SMEs to ensure consistent operational effectiveness. \nContribute to automation efforts that reduce manual effort and improve response consistency, particularly to extend effective coverage beyond US business hours. \nSupport the firm's ISO 27001 program through evidence collection, control testing, and audit readiness activities. \nImprove logging, detection coverage, and alerting for cloud/on-prem activity and resources (Palo Alto, Windows, Linux, CloudTrail, GuardDuty, Azure Activity Logs, Defender for Cloud, etc) \nWhat we're looking for:\nRequired \n5+ years in security engineering or security operations, with demonstrated ownership of detection, response, and tooling: not just participation. \nHands-on SIEM experience: writing detection logic, tuning alert rules, and building investigation workflows. \nExperience with EDR platforms and a strong understanding of endpoint-based threat detection and response. \nWorking knowledge of email-based threats: phishing, BEC, and the authentication controls (SPF, DKIM, DMARC) that govern them. \nSolid understanding of identity and access management; experience investigating identity-layer threats. \nAbility to communicate risk and technical findings clearly to both engineering peers and non-technical stakeholders, including senior leadership. \nSound judgment under pressure: able to make defensible decisions in ambiguous situations and drive them to resolution. \nNice to have \nExperience with vulnerability management platforms and risk-based prioritization frameworks. \nFamiliarity with ISO 27001 or similar compliance and audit frameworks. \nScripting or automation experience (Python, PowerShell, etc.) applied to security operations workflows. \nRelevant certifications (CySA+, CISSP, CISM) are a plus but not required. \n\nAbout GLG / Gerson Lehrman Group\nGLG is the world’s leading platform for trusted human expertise. We connect global decision-makers-from hedge fund managers and private equity partners to strategy leaders at Fortune 500s-with the specific, authoritative voices required to answer their most critical questions.\nAt GLG, you are an extension of our clients' core teams. You will work at the intersection of industries and global markets, navigating high-stakes challenges across the full spectrum of their strategic initiatives. Operating within the industry’s most trusted research environment, you’ll help our clients capture the nuanced perspectives that drive smarter, faster business outcomes.\nWe are a global team of pragmatic problem-solvers who mirror the intensity of the markets we serve. If you are driven by intellectual curiosity and a bias toward action, join us in reinventing the industry we invented.\nGerson Lehrman Group, Inc. (“GLG”) is an equal opportunity employer and will not discriminate against any employee or applicant on the basis of age, race, religion, color, marital status, disability, gender, national origin, sexual orientation, veteran status, or any classification protected by federal, state, or local law.","description_format":"text","description_chars":5893,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Market Research","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-13T03:48:31Z"}],"visa":[],"liveness":{"score":50,"band":"ok","label":"Likely open","p_open":1,"p_active":0.555,"p_room":0.9,"age_days":13,"expected_fill_days":22,"reasons":["conf:1","stale_co","win:mid"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/glg-senior-security-engineer","json_url":"https://alion.io/job/glg-senior-security-engineer.json","meta":{"generated_at":"2026-10-13T20:16:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31202,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58591},"rest":"https://alion.io/mcp/rest/get_company?id=58591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglg-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglg-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglg-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/glg-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglg-senior-security-engineer"}]}