Senior Engineer -Cyber Defence

Senior Engineer Cyber Defence Engineering

Key Responsibilities

Threat Hunting & Detection Engineering

• Lead proactive threat hunting activities across endpoint, network, identity, and cloud environments to identify advanced threats and malicious activity.
• Develop, optimize, and maintain high-fidelity detections across SIEM, EDR/XDR, and SOAR platforms.
• Leverage frameworks such as MITRE ATT&CK to assess detection coverage and enhance monitoring capabilities.
• Analyse security telemetry using KQL, Sigma, YARA, and other detection technologies to identify indicators of compromise and attack patterns.

Cyber Defence Engineering & Automation

• Engineer, integrate, and manage cyber defence technologies, including Microsoft Sentinel, Microsoft Defender, CrowdStrike, SOAR, and Threat Intelligence platforms.
• Design and implement automation workflows and response playbooks to improve operational efficiency and accelerate incident response.
• Partner with Infrastructure, Network, Cloud, and Workplace Technology teams to strengthen security visibility and telemetry coverage.

Incident Response & Threat Intelligence

• Act as a senior technical escalation point for complex security incidents and investigations.
• Translate threat intelligence into actionable detections, threat hunting use cases, and security controls.
• Conduct root cause analysis and drive continuous improvement through post-incident reviews and lessons learned.

Continuous Improvement & Collaboration

• Participate in purple team exercises and adversary simulations to validate and improve detection effectiveness.
• Develop security metrics, dashboards, and reports to measure cyber defence maturity and operational effectiveness.
• Mentor junior team members and contribute to the evolution of Cyber Defence Engineering practices and standards.

What We're Looking For

• 5-8 years of experience in Cyber Security with a focus on Threat Hunting, Detection Engineering, Incident Response, or SOC Operations.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Strong experience with EDR/XDR solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon.
• Experience building detections and hunting use cases using KQL, Sigma, YARA, or similar technologies.
• Strong understanding of the MITRE ATT&CK Framework, Cyber Kill Chain, and modern adversary TTPs.
• Proficiency in Python, PowerShell, or Bash for automation and integrations.
• Solid knowledge of Windows, Linux, Active Directory, Entra ID, Identity Security, Networking, and Azure/AWS cloud environments.
• Experience with security automation, orchestration, and incident response processes.

Preferred Certifications

• Microsoft Security Certifications (SC-200, SC-100, SC-300) 
• CrowdStrike Falcon Administrator or Falcon Responder 
• Certifications GCIH, GCDA, GCTI, or CTIA 
• CISSP (preferred)

Key Competencies

• Strong analytical and investigative mindset with a passion for cyber defence.
• Excellent problem-solving and critical-thinking skills.
• Ability to communicate technical concepts to both technical and non-technical stakeholders.
• Strong collaboration and stakeholder management skills.
• Passion for continuous learning and staying ahead of the evolving threat landscape.

Benefits which make us unique

At EZ, we know that great people are what makes a great firm. We value our people and offer employees a comprehensive benefits package. Learn more about what working at Egon Zehnder can mean for you!

Benefits Highlights:

• 5 Days working in a Fast-paced work environment
• Work directly with the senior management team
• Reward and Recognition
• Employee friendly policies
• Personal development and training
• Health Benefits, Accident Insurance

Potential Growth for you!

We will nurture your talent in an inclusive culture that values diversity. You will be doing regular catchups with your Manager who will act as your career coach and guide you in your career goals and aspirations.

Location

The position is based at Egon Zehnders KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.

EZIRS Commitment to Diversity & Inclusion

Egon Zehnder Information Research & Services (EZIRS) aims for a diverse workplace and strive to continuously lead with our firm values. We respect personal values of every individual irrespective of race, national or social origin, gender, religion, political or other opinion, disability, age and sexual orientation as warranted by basic rights enshrined in the UN Declaration of Human Rights. We believe diversity of our firm is central to the success and enables us to deliver better solutions for our clients. We are committed to creating an inclusive environment and supportive work environment, where everyone feels comfortable to be themselves and treated with dignity and respect and there is no unlawful discrimination related to employment, recruitment, training, promotion or remuneration.

Egon Zehnder is an Equal Opportunity Employer

Egon Zehnder provides equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, disability, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.