Lead Engineer, Security Threat Analysis & Response

Cvent; Gurugram District; On-site; INR 1,600,000 - 2,400,000; Full time

Job summary

Cvent is seeking a Lead Security Engineer to strengthen its security measures and response capabilities. This role involves investigating security incidents, mentoring junior staff, and optimizing incident response processes within cloud environments.

The ideal candidate will possess a Bachelor’s degree in Computer Science and at least 8 years of relevant experience. The position is located in Gurugram, Haryana, in a dynamic tech-focused environment that embraces innovation and rapid growth.

Qualifications

• 8+ years of experience in security engineering or incident response.
• Solid familiarity with scripting for digital forensics and incident response.
• Excellent problem-solving and analytical skills.

Responsibilities

• Conduct and manage security incident investigations.
• Mentor junior personnel in incident handling.
• Engage in proactive Threat Hunting activities.

Skills

Incident investigation analysis

Security operations

Threat hunting

Cloud security knowledge

Scripting for digital forensics

Education

Bachelor’s Degree in Computer Science

Tools

AWS services (CloudWatch, WAF, Lambda)

SIEM tools

Digital forensic tools

Job description

Overview

Cvent is a leading meetings, events, and hospitality technology provider with more than 5,000+ employees and 24,000+ customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we’re transforming the meetings and events industry through innovative technology that powers human connection.

Cvent's strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, take risks, and make decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.

AI at Cvent: Leading the Future

Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we’re committed to continuous learning and adaptation—AI isn’t just a tool for us, it’s part of our DNA. We’re looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you’ll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.

Throughout our interview process, you’ll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you’re excited to be part of a team that’s leading the way in AI-powered collaboration, we’d love to meet you.

Lead Security Engineer

Technology moves fast. In order to secure that technology, you need to be just as fast. Being agile in security today requires a combination of development, system engineering, and investigative skills. You are passionate about security and are at home with incident investigation analysis, yet unafraid to dive into engineering to create or optimize solutions to make incident response easier. Familiarity with Cyber Threat Intelligence (CTI) and threat hunting and their roles in incident response, monitoring, and detection is expected. Finally, you look to be a technical leader and mentor to other security engineers.

This position at Cvent is a technical, hands‑on role that involves investigating and responding to information security incidents, with a focus on intelligence‑driven incident response. The role also includes supporting engineering efforts that facilitate incident handling, such as work in SIEMs, SOAR platforms, EDR solutions, and Threat Intelligence Platforms (TIPs). A prime focus of the work will be on efficient Incident Response in dynamic cloud environments. You should also be able to adapt quickly and find creative ways to implement solutions in a fast‑paced and high‑profile technology landscape. You will work with the latest security tools, systems, and network technologies. A thirst for knowledge, a firm team‑based mindset, a curious mind, and the desire to continuously stay abreast of new developments in the dynamic security space is a must.

• Conduct and manage security incident investigations for both corporate and product environments
• Perform and lead Tier 2 and 3 responsibilities in support of Security Operations and Incident Response
• Mentor junior personnel in incident handling and investigations
• Help keep incident response plans, runbooks, and other business processes current
• Coordinate incident management functions between the Security Engineering and Operations Team, technology resource stakeholders, and other internal support organizations (i.e., SRE, Legal, Networking), ensuring security is appropriately leading security incident handling
• Assist with optimizing and auditing threat detection capabilities and SIEM content development in support of incident detection and investigation capabilities
• Identify and plan automated incident response solutions in SOAR platforms or via other AWS native solutions
• Work with other Security and Technology personnel to ensure that Threat Intelligence is well integrated into the Incident Response process
• Track and report on security incident investigations
• Assist with the management and operations of incident response supporting platforms as needed
• Stay abreast of emerging technologies related to Cloud Security
• Engage in proactive Threat Hunting activities
• Contribute strategically to the technological direction of the team and its programs
• 8+ years of experience in security engineering, security operations, or security incident response
• Bachelor’s Degree in Computer Science or related degree
• Solid familiarity with scripting in support of digital forensics and incident response, including the integration of various security tools
• Familiarity with incorporating cyber threat intelligence into incident response
• Experience investigating security incidents in AWS Cloud
• Some experience with the AWS platform and services such as Config, Security Hub, Lambda, CloudWatch, CloudTrail, S3, WAF, Guard Duty, Shield
• Ability to adapt to a hyper‑growth pace and changing priorities
• Excellent problem solving and analytical skills; outstanding oral and written communication skills
• Familiarity with common classes of security tools: SIEM, DLP, WAF, NGAV, and Vulnerability Scanners
• Self‑motivation and the ability to work under minimal supervision

Preferred Qualifications

• Knowledge of high‑traffic and other cloud‑based infrastructures and how they affect security needs (i.e., cloud infrastructure, AWS, Serverless SOA architectures) would be a plus
• Proficiency in Python or Java languages
• Proficiency with leading digital forensic tools, such as Magnet, Autopsy/the Sleuth Kit, volatility