Security Engineer

Recruito; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Recruito in Bengaluru is seeking an experienced cybersecurity professional to join our Security Operations team. You will drive detection engineering, incident response, and threat hunting to protect critical assets.

This role emphasizes hands-on work with SIEMs, EDRs, MITRE ATT&CK mappings, and cloud security across AWS, Azure, or GCP. You will collaborate with forensic and incident management teams and lead security projects end-to-end.

Qualifications

• Cybersecurity experience in detection engineering and incident response.
• Strong knowledge of MITRE ATT&CK, NIST, threat intelligence and security automation.
• Hands-on experience with SIEM platforms (Splunk, Elastic) and EDR tools.
• Experience with cloud security and incident response on AWS, Azure, or GCP.

Responsibilities

• Support cyber defense, threat detection, and incident response activities.
• Investigate security incidents and perform host and network forensics.
• Triage cybersecurity events and identify potential security breaches.
• Develop and improve threat detection rules and security controls.
• Create detection use cases based on MITRE ATT&CK TTPs.
• Work with SIEM and EDR tools to improve threat detection.
• Support 24x7 security operations and incident response.
• Lead assigned security projects and ensure timely completion.
• Work with security, forensic, and incident management teams.

Skills

Cybersecurity experience

MITRE ATT&CK

NIST framework

Threat intelligence

Security automation

Splunk

Elastic

Microsoft Defender

CrowdStrike

Python scripting

PowerShell scripting

Cloud security

Incident response

Tools

Splunk

Elastic

Microsoft Defender

CrowdStrike

Job description

Responsibilities

• Support cyber defense, threat detection, and incident response activities.
• Investigate security incidents and perform host and network forensics.
• Triage cybersecurity events and identify potential security breaches.
• Develop and improve threat detection rules and security controls.
• Create detection use cases based on MITRE ATT&CK TTPs.
• Work with SIEM and EDR tools to improve threat detection.
• Support 24x7 security operations and incident response.
• Lead assigned security projects and ensure timely completion.
• Work with security, forensic, and incident management teams.

Requirements

• Cybersecurity experience, including detection engineering and incident response.
• Strong knowledge of MITRE ATT&CK, NIST, threat intelligence, and security automation.
• Hands-on experience with Splunk, Elastic, and other SIEM platforms.
• Experience with EDR tools such as Microsoft Defender and CrowdStrike.
• Strong Python and PowerShell scripting skills.
• Experience with cloud security and incident response on AWS, Azure, or GCP.
• Strong analytical, problem-solving, and communication skills.