Security Operations Engineer

You will monitor, detect, and respond to security incidents across on-premise and cloud environments. You will investigate alerts and security events, perform forensic analysis, hunt for advanced threats, and recommend remediation. You will develop threat-hunting methods, automate detection workflows with scripts, and track emerging threats and vulnerabilities. You will participate in rotational on-call coverage and follow quarterly time-zone rotations, working on-site in Bangalore during local business cycles and remotely during global and US-aligned cycles.

Responsibilities

• Monitor, detect, and respond to security incidents across on-premise and cloud environments
• Analyze security alerts to identify potential threats
• Conduct forensic investigations and deep-dive analysis of security events
• Conduct proactive threat hunting across endpoint, network, and cloud environments
• Analyze security logs, behavioral patterns, and anomalies for indicators of compromise and attacker techniques
• Investigate incidents and recommend mitigation and remediation actions
• Develop and refine threat-hunting methodologies using MITRE ATT&CK and the Cyber Kill Chain
• Automate threat detection and analysis using Python, PowerShell, or Bash
• Monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies
• Participate in rotational weekend on-call pager duty

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience
• 3+ years of experience in security operations, threat hunting, or a similar cybersecurity role
• Experience using Cloud, EDR, Network, and related telemetry for detection and response
• Experience developing and deploying detection rules, including YARA, Sigma, SQL-based rules, or network signatures
• Understanding of network security monitoring, packet analysis, and log correlation
• Understanding of advanced threat detection methodologies and threat intelligence
• Proficiency analyzing attacker tactics, techniques, and procedures using MITRE ATT&CK
• Proficiency in security-operations scripting and automation using Python, PowerShell, or Bash
• Understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence
• Communication and cross-functional collaboration skills