onsemi
SR Security Operations Engineer
Lead cybersecurity incident response, threat hunting, and detection engineering using SIEM, EDR, SOAR, and AI tools to investigate and mitigate threats across enterprise environments.
- Compensation
- Not disclosed
- Location
- Bangalore, Karnataka, India
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Digital Forensics, Security Engineering, or a related cybersecurity discipline.
- Demonstrated experience leading complex investigations and coordinating response activities for high-priority cybersecurity incidents.
- Proven ability to independently manage investigative workstreams and drive incidents through resolution.
- Experience mentoring analysts and contributing to operational maturity initiatives.
Nice to have
- Experience with EDR, Anti-virus solutions, SIEM, email security, vulnerability and penetration testing platforms, and other enterprise security platforms.
- Proficiency with scripting languages, e.g. Python, PowerShell, bash, or similar languages.
- Experience with digital forensics technologies and investigative methodologies.
- Experience with security automation, SOAR, orchestration, and AI-assisted security operations.
- Familiarity with large language models (LLMs), agentic AI frameworks, retrieval-augmented generation (RAG), AI governance, and secure AI architecture.
- Experience conducting advanced threat hunting and detection engineering activities.
- Experience operating in cloud-first and hybrid enterprise environments.
- Knowledge of MITRE ATT&CK, NIST 800-61, CIS Controls, Zero Trust, and modern cyber defense frameworks.
- Industry certifications such as GCIA, GCIH, CISSP, CySA+, or equivalent.
Full description
Job Summary:
The ideal candidate is a self-motivated security professional who consistently delivers high-quality results, demonstrates strong ownership of investigations and operational outcomes, proactively identifies opportunities for improvement, mentors team members, and effectively leverages automation and AI technologies to enhance security operations, threat detection, and incident response capabilities.
Apply if you are looking for a challenging opportunity to drive direction and participate in the dynamic growth in IT security at onsemi, voted the World’s Most Ethical Company for 5 years in a row.
Performance ObjectivesSecurity Operations, Detection & Incident Response
- Lead the monitoring, analysis, investigation, and response of cybersecurity threats and security incidents across enterprise environments.
- Perform advanced triage and investigation of alerts generated by SIEM, EDR, DLP, IAM, cloud security, email security, network security, and other enterprise security technologies.
- Conduct comprehensive incident investigations, including threat validation, scope determination, timeline reconstruction, impact assessment, root cause analysis, and containment recommendations.
- Serve as an escalation point for junior analysts and assist with complex incidents requiring advanced analytical and technical expertise.
- Coordinate response activities across Security Operations, Infrastructure, Security Engineering, Legal, and business stakeholders.
- Drive incidents through the complete lifecycle from detection through remediation, recovery, documentation, and lessons learned.
- Maintain situational awareness of the evolving threat landscape, emerging risks, and active incidents affecting the organization.
Threat Hunting, Analysis & Detection Engineering
- Perform proactive threat hunting across endpoint, identity, network, cloud, application, and emerging technology environments to identify malicious activity beyond alert-driven detection.
- Leverage threat intelligence, behavioral analytics, telemetry correlation, and adversary tradecraft analysis to identify indicators of compromise (IOCs) and attacker tactics, techniques, and procedures (TTPs).
- Investigate sophisticated attack techniques including credential theft, ransomware, insider threats, business email compromise, cloud compromise, and living-off-the-land activity.
- Design, develop, tune, validate, and maintain detection content, analytics rules, dashboards, correlation logic, and threat-driven use cases.
- Continuously improve detection coverage through threat modeling, attack simulation findings, incident lessons learned, and intelligence-driven prioritization.