Senior Security Engineer SOC/MSSP & Detection Engineering
Symosis Security · Not specified · onsite · Posted 9d ago
About a minute. You'll make an account on the way through.
About this role
Full-time contract | Remote, India | 18–24 lakh per year
Independent contractor engagement; no employee benefits.
Working hours: US Eastern Time business hours, Monday–Friday, 9:00 AM–6:00 PM ET
About Symosis Security
Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients strengthen security through managed operations, engineering, assessments, and incident response.
We're looking for a senior engineer who can investigate complex alerts, improve detection coverage, troubleshoot security platforms, and automate operational workflows.
What you'll do
- Investigate escalated security alerts and incidents across endpoint, identity, email, cloud, and network environments.
- Support incident response, threat hunting, containment recommendations, and root-cause analysis.
- Develop and tune detection rules, improve alert quality, and identify telemetry gaps.
- Maintain SIEM/EDR integrations, troubleshoot ingestion failures, and validate security platform health.
- Integrate security platforms with ticketing and response workflows through APIs and automation.
- Improve playbooks, investigation documentation, and incident closure quality.
- Use Python, PowerShell, and AI coding tools to build and validate practical security automation.
- Participate in agreed shift or on-call coverage and scheduled overlap with US teams.
Essential qualifications
- 5+ years of cybersecurity experience, including hands-on SOC investigations and security platform engineering.
- Experience handling escalations beyond dashboard monitoring and ticket forwarding.
- Strong hands-on experience with at least one of Microsoft Sentinel/Defender, CrowdStrike, or Rapid7.
- Working knowledge of Windows, Linux, networking, identity attacks, and incident response.
- Experience writing detection queries using KQL, SPL, or another platform query language.
- Practical Python or PowerShell skills and experience working with REST APIs.
- Strong written English and clear investigation documentation.
- Ability to independently drive assigned issues through investigation, remediation coordination, and closure.
Preferred qualifications
- Microsoft Entra ID, Microsoft 365, Azure, and Active Directory security.
- ServiceNow integrations, SOAR workflows, and detection-as-code.
- Fortinet administration, vulnerability management, or network troubleshooting.
- Relevant certifications such as SC-200, AZ-500, CrowdStrike, GIAC, or CISSP.
How to apply
Apply through LinkedIn and email [HIDDEN TEXT] with:
- Résumé, certifications, notice period, and expected annual contract fee.
- A brief example of a complex incident you investigated and your specific contribution.
- An example of a detection, integration, or automation you implemented.
- Your availability for US overlap, shifts, and on-call coverage.
Sourced from foundit