Lead Engineer, Information Security

Majesco; India; Remote; INR 1,200,000 - 1,800,000; Full time

Job summary

Majesco is seeking a Lead Engineer, Information Security to enhance security monitoring, detection, vulnerability management, and incident response capabilities. The role combines hands-on security operations with technical ownership across Security, Infrastructure, and Cloud teams.

As a senior technical contributor, you will investigate security events, improve SIEM detection logic, validate log coverage, and reduce unnecessary false positives while maintaining meaningful coverage across the

Qualifications

• 4+ years of hands-on experience in security operations and monitoring.
• Experience working with SIEM platforms and tuning detection rules.
• Strong ability to analyze security events and distinguish legitimate activity.
• Understanding of Windows, network, cloud, and endpoint log sources.
• Experience with EDR technologies and vulnerability management.

Responsibilities

• Investigate, triage, document, and respond to security alerts in a timely manner.
• Develop, test, tune, and maintain SIEM correlation and detection rules.
• Analyze recurring alerts and false positives and tune coverage without reducing meaningful detection.
• Identify gaps in security monitoring and ensure logs/telemetry are ingested correctly.
• Validate logs sources provide necessary events for effective detection.
• Support integration of new systems and cloud platforms into monitoring.
• Work with Exabeam, CrowdStrike, Wiz, and other security/ cloud platforms.
• Support vulnerability management activities, including dashboards and reporting.
• Develop and improve security dashboards and reporting to reduce manual effort.
• Assist with incident investigations and tabletop exercises.
• Collaborate across Security, Infrastructure, Cloud, and other teams.
• Identify opportunities to improve operations and drive changes end-to-end.
• Maintain documentation for detection logic and procedures.

Skills

SIEM operations

EDR

Vulnerability management

Incident response

Threat detection

Security analytics

Log analysis

Cloud security

Education

Bachelor's degree in Information Security

Tools

Exabeam

CrowdStrike

Wiz

Sumo Logic

Job description

Majesco is looking for a Lead Engineer, Information Security to support and continuously improve our security monitoring, detection, vulnerability management, and incident response capabilities.

This role will be a senior technical contributor within the Information Security team, responsible for investigating security events, improving SIEM detection logic, validating security log coverage, reducing unnecessary false positives, and helping ensure that security monitoring provides meaningful and actionable detection across the environment.

The successful candidate should be comfortable both performing day-to-day security operations and identifying opportunities to make those operations more effective. This is a hands-on role that requires strong analytical skills, technical ownership, and the ability to work collaboratively across Security, Infrastructure, Cloud, and other technology teams.

KeyResponsibilities:

• Investigate,triage,document,andrespondtosecurityalertsandeventsinatimelymanner.
• Develop,test,tune,andmaintainSIEMcorrelationanddetectionrules.
• Analyzerecurringalertsandfalsepositivesandimplementappropriatetuning,exceptions,ordetectionimprovementswithout reducingmeaningfulsecuritycoverage.
• IdentifygapsinsecuritymonitoringandhelpensurerelevantsecuritylogsandtelemetryareproperlyingestedintotheSIEM.
• Validatethatlogsourcesprovidetheeventsanddatanecessarytosupporteffectivedetectionandinvestigation.
• Supporttheintegrationofnewsystems,applications,cloudplatforms,andsecuritytechnologiesintothesecuritymonitoring environment.
• WorkwithtechnologiessuchasExabeam,CrowdStrike,Wiz,andothersecuritymonitoringandcloudsecurityplatforms.
• Supportvulnerabilitymanagementactivities,includinganalysis,dashboards,reporting,andidentificationofmeaningfulsecurity trends.
• Developandimprovesecuritydashboardsandreportingtoreducemanualeffortandprovideusefulinformationtotechnical teamsandleadership.
• Assistwithsecurityincidentinvestigations,includingcollectionandanalysisofrelevantlogsandsecuritytelemetry.
• Participateinthedevelopmentandexecutionofincidentresponsetabletopexercisesandothersecuritypreparednessactivities.
• WorkcollaborativelywithothermembersoftheSecurityOperationsteam,sharingtechnicalknowledgeandhelpingimprove teamprocessesandcapabilities.
• Identifyopportunitiestoimprovesecurityoperationsandtakeownershipofimprovementsfrominitialproblemidentification throughimplementationandvalidation.
• Maintainappropriatedocumentationfordetectionlogic,monitoringcoverage,investigations,andoperationalprocedures.

RequiredQualifications:

• Bachelor'sdegreeinInformationSecurity,Cybersecurity,ComputerScience,InformationTechnology,orarelatedfield.
• 4+yearsofhands-onexperienceinsecurityoperations,securitymonitoring,incidentdetectionandresponse,vulnerability management,orarelatedinformationsecuritydiscipline.
• Stronghands-onexperienceinsecurityoperations,securitymonitoring,orincidentdetectionandresponse.
• ExperienceworkingwithSIEMplatforms,includinginvestigatingalertsanddevelopingortuningdetectionandcorrelationrules.
• UnderstandingofWindows,endpoint,network,application,cloud,andsecuritylogsources.
• Abilitytoanalyzesecurityeventsanddistinguishlegitimateactivity,falsepositives,andpotentiallymaliciousbehavior.
• Experiencewithendpointdetectionandresponse(EDR)technologiessuchasCrowdStrikeorequivalentplatforms.
• Understandingofvulnerabilitymanagementandexperienceworkingwithvulnerabilitymanagementorcloudsecurityplatforms.
• Workingknowledgeofcommonsecurityconcepts,includingthreatdetection,incidentresponse,identityandaccess management,networksecurity,endpointsecurity,andcloudsecurity.
• Abilitytoindependentlyinvestigatetechnicalissuesanddrivethemthroughresolution.
• Strongwrittenandverbalcommunicationskills,includingtheabilitytoexplaintechnicalsecurityissuesclearlytobothtechnical andnon-technicalaudiences.
• Abilitytoworkeffectivelyacrosstechnicalteamsandcollaboratewithinfrastructure,application,cloud,andsecuritypersonnel.

PreferredQualifications:

• ExperiencewithExabeamoranotherenterpriseSIEMorsecurityanalyticsplatform.
• ExperiencewithWizorcomparablecloudsecurityandvulnerabilitymanagementtechnologies.
• Experiencedevelopingdetectionlogicusingmultiplesecuritydatasources.
• Experienceonboarding,validating,andmaintainingSIEMlogsources.
• FamiliaritywithSumoLogicorsimilarlogmanagementplatforms.
• Experienceparticipatinginsecurityincidentresponseinvestigationsandtabletopexercises.
• Experiencecreatingsecuritydashboards,metrics,andautomatedreporting.
• ScriptingorautomationexperienceusingPowerShell,Python,APIs,orsimilartechnologies.
• FamiliaritywithcybersecurityframeworksandpracticessuchasNISTCSF,NISTIncidentResponseGuidance,MITREATT&CK,CISControls,orISO27001.
• RelevantindustrycertificationssuchasCISSP,Security+,CISM,GIAC,GCIH,GCIA,orequivalentcertificationsare preferred.

WhatSuccessLooksLike

A successful Lead Engineer will not simply process alerts. They will continuously improve the effectiveness of security operations by enhancing detection accuracy, identifying monitoring gaps, reducing avoidable false positives, strengthening log coverage, improving vulnerability visibility, and taking ownership of technical security improvements.

They will demonstrate measurable improvements to the security program through stronger detection coverage, more effective correlation rules, improved visibility into security risks, reduced manual effort through automation, enhanced reporting and metrics, and increased incident response readiness.

They are viewed as a trusted technical resource who proactively identifies problems, drives solutions, and helps elevate the overall maturity of Majesco's security operations capabilities.