Principal Information Security Engineer - Cyber Ops

FC Global Services India LLP (First Citizens India), a part of First Citizens BancShares, Inc., a top 20 U.S. financial institution, is a global capability center (GCC) based in Bengaluru. Our India-based teams benefit from the company’s over 125-year legacy of strength and stability. First Citizens India is responsible for delivering value and managing risks for our lines of business. We are particularly proud of our strong, relationship-driven culture and our long-term approach, which are deeply ingrained in our talented workforce. This is evident across all key areas of our operations, including Technology, Enterprise Operations, Finance, Cybersecurity, Risk Management, and Credit Administration. We are seeking talented individuals to join us in our mission of providing solutions fit for our clients’ greatest ambitions.

Job Description Value Proposition Be part of a cybersecurity operations & engineering function focused on defending against cyber threats including next-generation, AI-powered threats. This role enables the organization to stay ahead of adversaries by combining advanced threat intelligence, traditional and AI-assisted detection engineering, and proactive threat hunting strategies to secure digital ecosystems.

Job Details Position Title:

Principal Information Security Engineer - Cyber Ops Career Level: P4

Job Category: Individual Contributor

Role Type: Hybrid

Job Location: Bangalore

About The Team The Hunt and Detection Engineering function focuses on identifying emerging threats including AI-driven attacks, integrating actionable intelligence, and building intelligent detection and proactive hunting capabilities using modern analytics, automation, and AI/ML techniques.

Impact This role plays a critical role in strengthening the organization’s defense against AI-powered cyber threats. The engineer will translate threat intelligence into actionable detections, enhance visibility across environments, and develop advanced threat hunting methodologies targeting AI-generated phishing, autonomous malware, and evolving adversarial techniques. The role demands a combination of strategic foresight and deep technical expertise to ensure rapid detection, mitigation, and containment of sophisticated threats.

Key Deliverables

• Assess and operationalize actionable intelligence from Threat Intelligence teams related to AI-based threats and adversarial techniques.
• Analyze existing security controls to evaluate detection and mitigation capabilities against AI-generated threats.
• Design and implement a prioritized detection engineering framework focused on AI-driven attack patterns.
• Develop, maintain, and optimize detection use cases for AI-enabled threats such as generative phishing, deepfake attacks, and autonomous malware.
• Build and execute AI-assisted threat hunting playbooks to proactively identify malicious activities before escalation.
• Integrate detection logic into SIEM, SOAR, and advanced analytics platforms with focus on behavioral and anomaly-based detection.
• Collaborate with SOC and Incident Response teams to validate detections and improve response workflows.
• Continuously refine detection strategies based on threat landscape evolution, red team insights, and incident learnings.
• Research emerging trends in adversarial AI and incorporate them into detection and hunting methodologies.
• Automate detection deployment, tuning, and reporting through scripting and API-driven integrations.
• Ensure compliance with security standards, audit requirements, and documentation practices.

Functional Skills Skills and Qualification

• Strong expertise in threat detection engineering and proactive threat hunting methodologies.
• Ability to translate threat intelligence into actionable detection use cases.
• Proven ability to handle advanced, stealthy, and evolving threat scenarios.
• Strong analytical, problem-solving, and cross-functional collaboration skills.
• Ability to balance strategy with hands-on engineering execution
• Analyze logs, alerts, and telemetry from SIEM, EDR/XDR, NDR, and other security tools
• Investigate anomalies and suspicious patterns to uncover previously undetected threats

Technical/Business Skills

• 10+ years of experience in cybersecurity, with strong focus on detection engineering and threat hunting.
• Hands-on expertise with SIEM platforms, SOAR, EDR and security analytics tools
• Experience with technologies and products in Agentic and automated SOC domain
• Experience working with threat intelligence platforms and automated enrichment workflows.
• Strong understanding of AI/ML concepts in cybersecurity, including adversarial AI and anomaly detection.
• Knowledge of MITRE ATT&CK framework and mapping detections to tactics and techniques.
• Experience detecting and mitigating AI-driven threats
• Familiarity with cloud security (Azure, AWS, GCP) and hybrid environments.
• Experience with data analysis, behavioral analytics, and large-scale telemetry processing.

Leadership Qualities

• Demonstrates strong ownership and accountability for overall cybersecurity posture.
• Acts as a technical leader and subject matter expert in the domain.
• Drives innovation through adoption of AI-enabled and automation-first security practices.
• Mentors team members and promote knowledge sharing and best practices.
• Proactively identifies emerging risks and drives continuous improvement initiatives.

Relationships & Collaboration

• Collaborates closely with Threat Intelligence, SOC, Incident Response, and Red Team functions.
• Partners with engineering and platform teams integrate detection capabilities across systems.
• Works with risk and compliance teams to align detection strategies with governance requirements.
• Engages with vendors and external partners on advanced AI-driven security technologies.
• Build strong cross-functional relationships to enhance security operations effectiveness

Accessibility Needs We are committed to providing an inclusive and accessible hiring process. If you require accommodation at any stage (application, interviews, or onboarding), we will work with you to ensure a seamless experience.

Equal Employment Opportunity FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.