Staff Security Operations Engineer
Staff-level, hands-on security operations engineer at Pure Storage's Bangalore office, owning and maturing attack surface management, vulnerability management, zero trust, secrets security, detection engineering, and security automation. Drives risk reduction across cloud, infrastructure, and product teams using tools like Zscaler, Tenable, Wiz, CrowdStrike, and Splunk.
- Compensation
- Not disclosed
- Location
- Bangalore, India
- Work setup
- Not specified
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- 8+ years of cybersecurity experience, including significant experience in Security Operations, Attack Surface Management, Vulnerability Management, or Security Engineering
- Proven experience building, operating, or significantly improving an enterprise Vulnerability Management or Attack Surface Management program
- Strong understanding of asset discovery, vulnerability lifecycle, risk-based prioritization, remediation governance, and exposure management
- Hands-on technical experience with platforms such as Tenable, Qualys, Wiz, Prisma Cloud, Zscaler, CrowdStrike, Splunk, or comparable technologies
- Experience with security automation, REST APIs, scripting, and SOAR
- Strong security fundamentals across networking, cloud, endpoints, identity, Zero Trust, detection, and incident response
- Demonstrated ability to define KPIs, SLAs, operational processes, and security metrics to drive measurable improvements
- Strong stakeholder management skills; drive remediation without direct authority
- Ability to communicate technical security risk clearly to engineering teams and senior leadership
- Work from the Bangalore office (primarily in-office environment)
Nice to have
- Zscaler ZIA/ZPA/ZDeception/Zero Trust experience
- Vulnerability discovery, reporting and management with Tenable, Qualys, Rapid7, or similar
- Secrets discovery & credential/password security with GitGuardian, Gitleaks, TruffleHog, or similar
- SIEM / detection engineering with Splunk or similar
- Threat hunting & incident response
- CrowdStrike / EDR/XDR experience
- Security automation / SOAR with Splunk, Tines, Torq, or similar
- Cloud security with AWS, Azure, or GCP
- Network security
- Product security / DevSecOps / CI/CD security
- External Attack Surface Management (EASM)
- Certifications such as CISSP, CISM, GIAC, cloud security, or Zscaler certifications are beneficial
Full description
Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem.
This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us.
THE ROLE
As a Staff Security Operations Engineer, you will own and continuously mature capabilities across Attack Surface Management, Vulnerability Management, Zero Trust, Secrets and Credential Security, Detection Engineering, and Security Automation. This is a hands-on role requiring strong security engineering expertise combined with the ability to build teams, establish operating processes, measure outcomes, and drive remediation across Engineering, Cloud, Infrastructure, and Product organizations.
You will partner closely with GISO leadership and global security teams to translate security strategy into measurable execution and risk reduction.
WHAT YOU’LL DO
- Lead and mature enterprise Attack Surface and Vulnerability Management capabilities across cloud, infrastructure, endpoints, applications, and internet-facing environments.
- Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls.
- Establish operating processes, remediation SLAs, KPIs/KRIs, dashboards, and governance to measure and drive security risk reduction.
- Identify systemic security gaps and develop scalable technical and operational solutions.
- Provide technical leadership across Zscaler/Zero Trust, secrets and credential security, SIEM/detection engineering, EDR, cloud security, and security automation.
- Drive automation and integrations using APIs, scripting, and SOAR to reduce manual effort and improve operational efficiency.
- Partner with Engineering, Product Security, Cloud, Network, Infrastructure, and business leaders to establish ownership and drive remediation of security exposures.
- Translate complex security risks and technical findings into clear recommendations for engineering teams and senior leadership.
WHAT YOU BRING
- 8+ years of cybersecurity experience, including significant experience in Security Operations, Attack Surface Management, Vulnerability Management, or Security Engineering.
- Proven experience building, operating, or significantly improving an enterprise Vulnerability Management or Attack Surface Management program.