Senior Security Operations Engineer - BFSI Domain

Role Overview :

We are looking for a Senior Software Development Engineer - Security Operations with strong experience in cybersecurity operations within the BFSI domain.

The role will be responsible for monitoring and strengthening the organization's security posture, managing security incidents, implementing security controls, and ensuring the protection of critical systems, applications, networks, and data.

Key Responsibilities :1. Security Operations & Monitoring :

• Monitor security infrastructure, applications, networks, and critical systems for potential threats and vulnerabilities.

• Analyze security alerts and events and coordinate timely investigation and resolution.

• Manage day-to-day security operations and ensure effectiveness of security controls.

• Work with SOC teams on threat detection, triage, escalation, and incident response.

• Maintain security dashboards, reports, and operational metrics.

2. Incident Response & Threat Management:

• Investigate and respond to security incidents, breaches, and suspicious activities.

• Perform root-cause analysis and recommend corrective and preventive measures.

• Develop and maintain incident response procedures and escalation mechanisms.

• Monitor emerging cyber threats and assess their potential impact on BFSI systems.

• Support security incident drills, simulations, and post-incident reviews.

3. Vulnerability & Security Assessment:

• Conduct vulnerability assessments across applications, infrastructure, networks, and endpoints.

• Work with technology teams to prioritize and remediate identified vulnerabilities.

• Support penetration testing, security assessments, and periodic security reviews.

• Track remediation activities and ensure closure within defined timelines.

• Identify security gaps and recommend improvements to strengthen the overall security posture.

4. Application & Infrastructure Security:

• Collaborate with application, infrastructure, cloud, and network teams to embed security controls into technology environments.

• Review application and infrastructure changes from a security perspective.

• Support implementation of security technologies including SIEM, EDR, WAF, IDS/IPS, vulnerability management, and endpoint security solutions.

• Monitor access controls, privileged accounts, authentication mechanisms, and security configurations.

• Ensure appropriate protection of sensitive financial and customer information.

5. BFSI Security & Compliance:

• Ensure security operations align with applicable BFSI regulatory requirements, information security policies, and industry frameworks.

• Support audits, compliance assessments, and security reviews.

• Maintain appropriate security documentation, SOPs, policies, and operational records.

• Work with risk and compliance teams to address security observations and audit findings.

• Ensure security controls are periodically reviewed for effectiveness.

6. Security Automation & Continuous Improvement:

• Identify opportunities to automate repetitive security monitoring, reporting, and response activities.

• Improve security operations processes, tools, and workflows to enhance efficiency.

• Contribute to security architecture and technology improvement initiatives.

• Evaluate emerging security technologies and recommend suitable solutions.

• Drive continuous improvement in threat detection, response time, and security visibility.

Key Skills & Qualifications :

• Bachelor's/Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 5-10 years of experience in Cybersecurity, Information Security, Security Operations, or related areas.

• Strong experience in BFSI / Banking / Financial Services / FinTech environments.

• Hands-on understanding of SOC operations, SIEM, incident response, vulnerability management, and security monitoring.

• Knowledge of network, application, endpoint, cloud, and infrastructure security.

• Good understanding of OWASP, ISO 27001, NIST, CIS, and relevant security practices.

• Experience with security tools such as SIEM, EDR, WAF, IDS/IPS, DLP, and vulnerability scanners.

• Strong analytical, troubleshooting, incident-management, and problem-solving skills.

• Relevant certifications such as CISSP, CISM, CEH, Security+, or similar would be an advantage.