Cyber Security / Information Security Engineer

Role & responsibilities

Role & Responsibilities

• Design, implement, monitor, and maintain Cyber Security and Information Security controls across enterprise environments.
• Monitor security events, alerts, and incidents through SOC and SIEM platforms; perform investigation, triage, escalation, and resolution.
• Work with SIEM tools such as Splunk for log analysis, event correlation, alert management, and security monitoring.
• Handle Incident Response and Security Incident Management activities, including containment, remediation, root cause analysis, and post-incident reporting.
• Manage IAM and PAM activities including user access, privileged access, authentication, authorization, role-based access, and periodic access reviews.
• Work with PAM solutions such as CyberArk and support identity and privileged access security processes.
• Support NOC and Network Security operations including network monitoring, firewall, VPN, IDS/IPS, and security troubleshooting.
• Perform Vulnerability Management, Vulnerability Assessment, VAPT, and Penetration Testing activities and track remediation to closure.
• Manage Endpoint Security and EDR solutions including SentinelOne, CrowdStrike, and similar endpoint protection platforms.
• Investigate endpoint alerts, suspicious activities, malware/ransomware events, and coordinate remediation actions.
• Implement and monitor Cloud Security controls across AWS, Azure, GCP, and other cloud environments.
• Support Application Security and DevSecOps activities across the Software Development Life Cycle.
• Perform Threat Intelligence and Threat Management activities to identify emerging threats, indicators of compromise, attack patterns, and security risks.
• Support threat hunting and proactive security investigations using SIEM, EDR, and threat intelligence data.
• Participate in GRC, security risk management, compliance, audit, and security assessment activities.
• Maintain security policies, procedures, standards, controls, incident records, risk registers, and audit documentation.
• Collaborate with Network, Infrastructure, Cloud, Application, IAM, SOC, NOC, and other technology teams on security requirements and remediation.
• Prepare security reports, dashboards, incident metrics, vulnerability reports, and management updates.
• Ensure security incidents, vulnerabilities, access issues, and remediation activities are tracked and closed within defined timelines.
• Stay updated with emerging cyber threats, attack techniques, security technologies, and industry best practices.

Preferred candidate profile

Preferred Candidate Profile

• 512 years of relevant experience in Cyber Security, Information Security, IT Security, Security Operations, or related security domains.
• Strong experience in one or more areas such as SOC, SIEM, IAM, PAM, NOC, Network Security, VAPT, Vulnerability Management, Endpoint Security, Cloud Security, Application Security, GRC, or Incident Response.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or equivalent tools.
• Experience in IAM/PAM technologies and solutions such as CyberArk, SailPoint, Okta, or Microsoft Entra ID is preferred.
• Experience with Endpoint Detection and Response (EDR) solutions such as SentinelOne, CrowdStrike, Microsoft Defender, or equivalent.
• Strong understanding of Network Security concepts including Firewalls, IDS/IPS, VPN, NAC, and network monitoring.
• Hands-on experience in Vulnerability Management, VAPT, Penetration Testing, Vulnerability Assessment, and security remediation.
• Good understanding of Cloud Security across AWS, Azure, GCP, or other cloud platforms.
• Knowledge of Application Security, DevSecOps, API Security, SAST/DAST, and Secure SDLC is preferred.
• Strong understanding of Threat Intelligence, Threat Management, Threat Hunting, Incident Response, and Security Incident Management.
• Experience with GRC, Risk Management, Compliance, Security Audits, and security frameworks such as ISO 27001 and NIST is preferred.
• Strong analytical, troubleshooting, investigation, and debugging skills.
• Ability to analyze security alerts, logs, vulnerabilities, incidents, and security events effectively.
• Good communication and stakeholder management skills with the ability to work with cross-functional technical teams.
• Ability to work independently as well as collaboratively in a 24x7 security operations environment, wherever required.