Senior Security Engineer
- Compensation
- Not disclosed
- Location
- Hyderabad, India
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- – Experience working in an MSSP & MXDR operational environment.
- – 5+ years of hands-on experience in security infrastructure and platform engineering.
- – Proven experience deploying and administering firewall platforms (NGFW) and DLP solutions in enterprise environments.
- – Hands-on SIEM Deployment and engineering experience with at least two platforms (Wazuh, Sentinel, Securonix, QRadar, CrowdStrike SIEM, or Chronicle).
- – Experience deploying and managing any of EDR/XDR platforms — SentinelOne, CrowdStrike Falcon, or Microsoft Defender.
- – Solid detection engineering skills - writing correlation rules, use cases, and tuning alerts based on MITRE ATT&CK.
- – Scripting ability in Python or equivalent for automation and platform integration tasks.
- – Familiarity with SOAR platforms and incident response automation
- – Understanding of cloud security fundamentals across AWS, Azure, or GCP.
- – Having relevant cloud security (Azure, AWS, GCP) and tool expertise certifications will be an added advantage
- Key Competencies
- - Strong problem-solving and analytical thinking
- - Ability to lead engineering initiatives and mentor teams
- - Excellent communication and stakeholder management skills
- - Passion for automation, innovation, and continuous improvement
Full description
Role Overview
We are looking for a
hands-on Security Platform Engineer to deploy, manage, and continuously improve
the security infrastructure that underpins our MXDR / MSSP operations. The role
covers the full stack from endpoint and network security to SIEM engineering
and detection engineering and is suited for someone who is equally comfortable
hardening a Windows or Linux server, tuning firewall rules, and building
detection logic in a SIEM.
The ideal candidate will
have strong expertise across SIEM platforms, cloud and network security, zero
trust architecture, and automation, with the ability to lead engineering
initiatives and deliver production-grade security solutions.
Key Responsibilities
– Deploy
and administer SIEM platforms, including designing and delivering solutions to
customers.
– Own the log onboarding lifecycle – log source integration,
parsing, normalization, enrichment, and storage optimization across
multi-tenant environments.
– Deliver and Manage EDR and XDR platforms include deployment,
policy configuration, agent management, and health monitoring.
– Participate
in customer workshops, architecture reviews, and prepare HLD and LLD documents
for finalized architecture.
– Support
pre-sales teams in solution, technical discussions, and proposal responses
– Build
and maintain detection content - correlation rules, use cases, and UEBA models
aligned to MITRE ATT&CK
– Develop and maintain SOAR playbooks for automated alert triage,
containment, and response workflows.
– Administer and tune DLP policies; investigate DLP incidents and
work with business teams to reduce false positives while protecting sensitive
data.
– Deploy, harden, and maintain security controls across Windows
and Linux environments, including patch management, OS-level hardening, and
access control.
– Deploy, manage and administer firewall platforms (NGFW) -
including policy creation, rule review, traffic analysis, and periodic audits.
– Configure and support VPN solutions for secure remote and
site-to-site connectivity.
– Extend security controls to cloud environments (AWS, Azure, GCP)