Cloud Security Module Lead-Service Support

Sopra Steria; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Sopra Steria in India is seeking a Cloud Security Engineer with a strong incident response background to join our security team. You’ll be on the front lines detecting, investigating, and remediating security events across our cloud infrastructure and endpoints.

The ideal candidate has 4–6 years of experience in security engineering or IR, hands-on CrowdStrike and Splunk, and understands AWS IAM and CloudTrail. This role requires shift work and a collaborative, high‑pressure environment.

Qualifications

• 3+ years in a security engineering, SOC, or incident response role.
• Hands-on with CrowdStrike investigation workflows and detections tuning.
• Proficiency in Splunk — SPL, data onboarding, and building dashboards.
• Solid understanding of AWS IAM and cloud-native audit trails.

Responsibilities

• Lead end-to-end incident response: triage, containment, investigation, and post-incident review.
• Hunt for threats and investigate alerts using CrowdStrike and other tools.
• Build and tune detection logic in Splunk with dashboards and alert fidelity.
• Audit and investigate events in AWS CloudTrail, CloudWatch, GuardDuty, Security Hub, and Config.
• Correlate signals across endpoint, network, and cloud for attack timelines.
• Document findings and produce clear incident reports for technical and non-technical audiences.
• Contribute to runbooks, playbooks, and continuous IR program improvement.

Skills

Incident response

Threat hunting

Technical communication

Security engineering

Education

BE/B.Tech/MCA (CS/EC or related)

Tools

CrowdStrike

Splunk

AWS CloudTrail

AWS CloudWatch

GuardDuty

Config

Job description

About Sopra Steria
Sopra Steria, a major Technology player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.

Job Description

We’re looking for a Cloud Security Engineer with a strong incident response background to join our security team. You’ll be on the front lines detecting, investigating, and remediating security events across our cloud infrastructure and endpoints.

What You’ll Do

• Lead end-to-end incident response: triage, containment, investigation, and post-incident review
• Hunt for threats and investigate alerts using CrowdStrike Falcon (EDR, threat intelligence, and OverWatch)
• Build and tune detection logic in Splunk — write SPL queries, create dashboards, and maintain alert fidelity
• Audit and investigate events in AWS CloudTrail, CloudWatch, GuardDuty, Security Hub, and Config
• Correlate signals across endpoint, network, and cloud layers to establish attack timelines
• Document findings and produce clear incident reports for both technical and non‑technical audiences
• Contribute to runbooks, playbooks, and continuous improvement of the IR program

What You Bring

• 3+ years in a security engineering, SOC, or incident response role
• Hands‑on experience with CrowdStrike (investigation workflows, RTR, detections tuning)
• Proficiency in Splunk — SPL, data onboarding, and building actionable dashboards
• Solid understanding of AWS IAM, CloudTrail log structure, and cloud‑native audit trails
• Familiarity with attacker TTPs (MITRE ATT&CK) and how they map to cloud environments
• Ability to communicate technical findings clearly under pressure

Nice to Have

• GCIH, GCFE, AWS Security Specialty, or similar certifications
• Experience with IaC security tooling (Terraform, CloudFormation scanning)
• Scripting ability in Python or Bash for automation and log parsing

Total Experience Expected: 4–6 years

Qualifications

B.E, B.Tech, MCA (Computer Science, Electronics or related branches only)

Additional Information

Job requires working in shifts with standby/on‑call support on weekends/out of business hours.

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences. All of our positions are open to people with disabilities.