Security Engineer

Monitor, investigate and respond to cybersecurity threats, suspicious activities and security incidents across enterprise systems and networks.

Conduct proactive threat hunting, threat intelligence analysis and incident investigations to identify potential security risks.

Perform adversary emulation, purple teaming and security testing to assess detection capabilities and identify security weaknesses.

Develop and enhance threat detection use cases, monitoring rules and incident response processes.

Analyse security logs and events using SIEM platforms such as Splunk and ELK.

Develop automation scripts and security tools using Python to improve threat detection, investigation and response capabilities.

Investigate endpoint, network and Linux-based security events, including anomalous system behaviours.

Assess existing security controls against recognised cybersecurity frameworks and regulatory requirements.

Identify security gaps, recommend technical remediation measures and support implementation with engineering teams.

Evaluate emerging cybersecurity threats, including AI-related security risks, and recommend appropriate mitigation controls.

Support security incident documentation, technical reporting and periodic on-call incident response activities.

Minimum 5 years of hands-on experience in cybersecurity engineering, security operations, threat detection or incident response.

Strong technical knowledge of threat hunting, incident response and security monitoring.

Practical experience with red teaming, penetration testing or adversary simulation techniques.

Hands-on experience with SIEM and log analysis platforms, preferably Splunk or ELK.

Proficiency in Python scripting for security automation and technical investigations.

Strong understanding of Linux environments, command-line tools, operating system security and network security fundamentals.

Experience investigating security incidents, identifying indicators of compromise and analysing suspicious activities.

Familiarity with cyber threat intelligence, attack techniques and security detection methodologies.

Understanding of AI security threats, vulnerabilities and associated security controls.

Experience assessing technical security controls and supporting cybersecurity risk, compliance or regulatory requirements.

Knowledge of recognised cybersecurity frameworks, including NIST and CIS Controls.

Experience working in highly regulated environments, particularly financial services or technology-intensive organisations.

Familiarity with MITRE ATT&CK, threat intelligence platforms and advanced detection engineering practices.

Knowledge of SEBI Cybersecurity and Cyber Resilience Framework (CSCRF).

Experience with EDR/XDR platforms, endpoint forensics and network traffic analysis.

Exposure to security testing frameworks, vulnerability assessment tools and purple teaming methodologies.

Experience building automated security workflows, detection pipelines or incident response integrations.

Relevant certifications such as OSCP, GCIH, GCFA, GCIA, CISSP or equivalent.