Sr. IT Engineer (Security)
Senior IT Security Engineer leading DataCore's Security Operations Center: running incident response, threat hunting, vulnerability management, and compliance programs (SOC 2 Type II, ISO 27001, GDPR) while mentoring analysts. Core stack includes Sophos Intercept X, Windows Defender, Proofpoint, and ManageEngine. Remote from India.
- Compensation
- Not disclosed
- Location
- India
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 8+ years
- Category
- Software engineering
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or related field (or equivalent professional experience)
- 6-8+ years of hands-on experience in IT Security, incident response, or security operations
- Advanced expertise in SOC operations, incident response management, and threat investigation, with ability to lead complex investigations
- Expert-level knowledge of operating systems (Windows Server, Linux) including security hardening, OS-level threat detection, and endpoint security architecture
- Advanced understanding of networking concepts (TCP/IP, DNS, firewalls, VPN) and network security architecture; design secure network segmentation
- Deep understanding of attack vectors, attack chains, and the cyber kill chain; ability to map threats to MITRE ATT&CK
- Expert hands-on experience with Sophos Central Intercept X Advanced or similar advanced EDR solutions
- Expert experience with Windows Defender for Endpoint and/or other enterprise antivirus/anti-malware solutions at scale
- Expert-level knowledge of email security; deep experience with Proofpoint or similar; proficiency in SPF, DKIM, DMARC, BIMI
- Expert-level experience with vulnerability scanning and management tools, preferably ManageEngine
- Advanced expertise in SIEM tools and log analysis; design SIEM architectures, correlation rules, and security use cases
- Demonstrated expertise in compliance frameworks (SOC 2 Type II, ISO 27001, GDPR, NIS2) and leading audits
- Expert-level analytical and problem-solving skills with strategic thinking about security architecture
Nice to have
- Advanced security certifications such as CISSP
- CompTIA Security+ or equivalent foundational certifications
- Advanced experience with threat intelligence platforms and intelligence-driven security operations
- Advanced scripting skills (PowerShell, Python, Bash) for security automation and SIEM rule development
- Advanced cloud security expertise (Azure, AWS) and cloud-native threat detection
- Experience with SOAR platforms and automation of incident response workflows
- Incident response leadership; experience as incident commander or on IR teams for critical incidents
- Security architecture and design expertise; experience building or redesigning security infrastructure
- Experience with GRC platforms and compliance automation
- Vendor management experience; evaluating, negotiating, and managing security tool contracts
- Threat hunting expertise and advanced threat hunting methodologies
Full description
Position Summary
We are seeking a strategic and experienced Senior IT Security Engineer to lead our Security Operations Center (SOC) and drive our organization's cybersecurity excellence. You will play a critical leadership role in managing complex security incidents, designing vulnerability management strategies, overseeing security compliance frameworks, and mentoring our security team. With 6-8+ years of advanced hands-on security experience, deep expertise in incident response and threat investigation, proficiency with enterprise security platforms (Sophos Intercept X, Windows Defender, Proofpoint, ManageEngine), and a demonstrated track record of building secure infrastructure, you will help establish DataCore as a security leader. If you can think strategically about security architecture, lead incident response investigations, mentor junior analysts, and drive compliance initiatives across SOC 2 Type II, ISO 27001, and GDPR, we want to hear from you!
Duties & Responsibilities
Strategic & Leadership Responsibilities:
- Lead the Security Operations Center (SOC) team, mentor junior and mid-level analysts, and establish best practices for incident response and threat detection
- Design and implement security monitoring strategies, detection engineering capabilities, and alert tuning frameworks across Sophos, Proofpoint, Windows Defender, and ManageEngine
- Develop and maintain security policies, procedures, runbooks, and playbooks for the organization; ensure alignment with SOC 2 Type II, ISO 27001, GDPR, and NIS2 requirements
- Conduct security risk assessments and threat modeling; recommend security architecture improvements and infrastructure hardening initiatives
- Serve as primary liaison with compliance teams; drive audit readiness activities and evidence collection for SOC 2, ISO 27001, and regulatory compliance programs
- Evaluate, select, and manage security tools and vendor relationships; conduct cost-benefit analysis and ROI assessments for new security solutions
- Lead incident response for complex, multi-stage security incidents; perform advanced root cause analysis and develop strategic remediation plans
Operational & Technical Responsibilities:
- Monitor, detect, analyze, and respond to security incidents and alerts from Sophos Intercept X Advanced, Windows Defender, Proofpoint, and other security platforms with advanced investigation techniques
- Conduct comprehensive vulnerability assessments and security scans using ManageEngine; establish prioritization frameworks based on business context and threat landscape
- Investigate advanced threats, malware incidents, and suspected breaches; perform forensic analysis and produce detailed incident reports with executive summaries