Lead Security Engineer

Crest Data; Ahmedabad District; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

Crest Data is seeking a Lead Security Engineer in India to architect and lead security platform implementations, including SIEM, EDR, and SOAR. You will act as the main technical contact for large client engagements, translating complex security needs into actionable plans and ensuring delivery quality across projects.

Responsibilities include developing detection content, playbooks, and run books, and mentoring junior consultants while contributing to pre-sales and solution scoping efforts.

Qualifications

• Own large client engagements end-to-end from requirements through delivery.
• Architect and deploy SIEM at scale with data onboarding and detection engineering.
• Hands-on deployment of EDR platforms in enterprise contexts.

Responsibilities

• Architect and lead end-to-end security platform implementations across SIEM, EDR, SOAR, and related tooling; including scoping, design, deployment, integration, and knowledge transfer.
• Serve as the primary technical point of contact for large, complex client engagements, managing stakeholder expectations and delivery quality simultaneously.
• Translate ambiguous client security requirements into structured implementation plans with defined milestones, acceptance criteria, and risk callouts.
• Develop detection content, response playbooks, and operational run books tailored to client environments and threat profiles, grounded in MITRE ATT&CK coverage mapping.
• Identify gaps in client security posture through structured assessments and present prioritized remediation roadmaps to technical teams and executives.
• Mentor and provide technical direction to mid-level and junior consultants on active engagements, setting quality standards for deliverables.
• Contribute to pre-sales and solution scoping activities, including technical discovery, proposal development, and effort estimation.

Skills

Client engagements ownership

SIEM platforms

EDR platforms

Tools

PAN XSIAM

CrowdStrike Falcon

Splunk

Elastic Security

IBM QRadar

Job description

Crest Data is the global leading provider of Data Analytics, Security, DevOps, Cloud Solutions, Software integrations, Analytics, and security-based technological services. With a clientele that includes several Fortune 500 corporations and some of the innovative Silicon Valley Startups

Company URL: http://www.crestdata.ai

About the Role : Lead Security Engineer

Experience : 5+ Years

Responsibilities :

• Architect and lead end-to-end security platform implementations across SIEM, EDR, SOAR, and related tooling; including scoping, design, deployment, integration, and knowledge transfer.
• Serve as the primary technical point of contact for large, complex client engagements, managing stakeholder expectations and delivery quality simultaneously.
• Translate ambiguous client security requirements into structured implementation plans with defined milestones, acceptance criteria, and risk callouts.
• Develop detection content, response playbooks, and operational run books tailored to client environments and threat profiles, grounded in MITRE ATT&CK coverage mapping.
• Identify gaps in client security posture through structured assessments and present prioritized, business-contextualized remediation roadmaps to both technical teams and executive stakeholders.
• Mentor and provide technical direction to mid-level and junior consultants on active engagements, setting quality standards for deliverables and client interactions.
• Contribute to pre-sales and solution scoping activities, including technical discovery, proposal development, and effort estimation. Drive internal knowledge development through documentation of repeatable methodologies, detection frameworks, and lessons learned from client deployments.

Required Skills :

• Proven track record owning large client engagements — full lifecycle, from requirements through delivery — with direct accountability for outcomes and client satisfaction.
• Deep hands‑on expertise with at least two enterprise SIEM platforms (PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar), including architecture design, data onboarding, detection engineering, and performance tuning at scale.
• Hands‑on experience with EDR platforms (CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) in enterprise deployment and operational contexts.

Nice to Have :

• Advanced certifications: CISSP, CISM, GCIA, GCED, GCIH, or equivalent; SIEM/platform vendor certifications (Splunk Architect, CrowdStrike Certified Falcon Administrator, etc.)
• Cloud security architecture and implementation experience across AWS, Azure, or GCP — including native security services, cloud SIEM integration, and identity-based threat detection.
• Scripting and automation capability (Python, PowerShell, or Bash) applied to security engineering tasks: parser development, detection pipeline automation, or SOAR playbook construction.
• Prior experience in a formal people management, team lead, or technical lead capacity — even informally within a consulting engagement
• Familiarity with pre-sales motions, including client discovery, solution design, and proposal support in a consulting or professional services context
• Exposure to compliance and regulatory frameworks (NIST CSF, SOC 2, ISO 27001, PCI-DSS, HIPAA) as they apply to security architecture and control design.

are a plus.

structure.