About the Role:
The Cybersecurity Engineer is responsible for designing, implementing, and maintaining the technical security controls and infrastructure required to protect organizational assets. The role is heavily focused on threat detection and response, vulnerability management, endpoint protection, and incident response readiness in both BYOD and corporate environments.
Responsibilities:
- Threat Detection and Response
- Deploy, configure, and maintain SIEM, EDR, and SOC tooling or services. - Develop detection rules, correlation logic, and custom alerts. - Investigate and respond to alerts and incidents with root cause analysis and remediation. - Integrate threat intelligence feeds and tune detection capabilities.
- Vulnerability Management and Red Teaming
- Conduct automated and manual vulnerability scans. - Integrate vulnerability management into CI/CD and patch workflows. - Develop and execute red/purple team assessments and simulations. - Collaborate with IT teams on remediation and validation.
- Security Incident Response and Breach Readiness
- Develop and maintain incident response plans and runbooks. - Act as first responder for major incidents, including triage and coordination. - Implement forensic tooling and logging for investigation. - Lead post-incident reviews and develop lessons learned.
- Endpoint Protection and BYOD Security
- Deploy and manage endpoint protection across Windows, macOS, and mobile platforms. - Implement host-based firewalls, anti-malware, disk encryption, and device hardening policies. - Manage BYOD security policies and compliance monitoring.
- Security Engineering and Compliance Support
- Automate security workflows using scripts, APIs, and orchestration platforms. - Assist in compliance readiness efforts (ISO 27001, SOC 2, PCI DSS, HIPAA). - Develop technical documentation and assist in audit evidence collection. - Provide technical guidance to other teams and stakeholders.
Looking For
- 6+ years of experience in Security Engineering, SOC Operations, Incident Response, or Cybersecurity Operations.
- Strong hands-on experience with security monitoring, threat detection, vulnerability management, and incident response.
- Experience working in enterprise security environments with cloud and endpoint security responsibilities
Mandatory Skills:
A. Technical Skills
- Hands-on experience with SIEM (e.g., Splunk, Sentinel), EDR (e.g., CrowdStrike, Defender), and vulnerability scanners.
- Proficiency in scripting (e.g., Python, PowerShell) and security tool integrations.
- Strong understanding of Windows, Linux, and cloud (AWS/Azure) security.
B. Soft Skills
- Strong analytical and problem-solving skills.
- Excellent communication and documentation abilities.
- Stakeholder management and collaboration skills.
- Ability to work in high-pressure incident response situations.
- Attention to detail and continuous improvement mindset.
Good to Have Skills:
- Certifications such as OSCP, GCIA, GCIH, or CISSP.
- Experience with red team tooling (e.g., Cobalt Strike, Metasploit).
- Knowledge of MITRE ATT&CK and threat hunting techniques.
- Familiarity with security orchestration, automation, and response (SOAR) tools.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
- Equivalent practical experience may be considered in lieu of formal education.
Must work EST hours - 6:30 PM IST to 3:30 AM IST
