Security Engineer

Sauce Labs; Gurugram District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Sauce Labs is looking for a motivated Security Engineer based in Gurugram District, Haryana. This role requires working in the office five days a week and involves securing and monitoring corporate environments, implementing security controls, and assessing security events.

The ideal candidate will have a solid background in Linux and cloud security, experience with vulnerability assessments, and proficiency in shell scripting. Join us to enhance our security posture across diverse infrastructure and technologies.

Qualifications

• 3–5 years of hands-on experience in IT support or cybersecurity-related positions.
• Demonstrable knowledge of Linux servers, preferably Ubuntu.
• Familiarity with common security frameworks like MITRE ATT&CK.

Responsibilities

• Assist in security controls implementation and maintenance.
• Conduct regular security assessments and vulnerability scans.
• Analyze security events and notifications.

Skills

Linux administration

Cloud Security Posture Management (CSPM)

Shell scripting (zsh or bash)

Vulnerability and security scanning tools

Security frameworks knowledge

Education

Associate's or Bachelor's of Science degree

Tools

Tenable Nessus

OpenVAS

Google Cloud Platform

Job description

This position requires being in office 5 days per week.

The Role

We are seeking a highly motivated and detail-oriented Security Engineer to join our Security Blue Team. This is an excellent opportunity for an individual passionate about cybersecurity to grow their experiences across a wide array of infrastructure and technologies, including mobile devices, Kubernetes, public cloud, and on-premises infrastructure. You will play a vital role in identifying vulnerabilities, implementing security controls, and contributing to our overall security posture.

Responsibilities

• Assist in the implementation and maintenance of security controls across our macOS, Linux, and Kubernetes environment, with a focus on Ubuntu and Google Kubernetes Engine.
• Assist the IT team in securing and monitoring corporate workstations and devices.
• Conduct regular security assessments and vulnerability scans using tools like Tenable Nessus or OpenVAS.
• Analyze security events and notifications, escalating internally as necessary.
• Perform triage and maintain ownership of vulnerabilities across a wide range of sources and teams.
• Apply knowledge of common security frameworks (MITRE ATT&CK, OWASP Top 10, CIS, etc.) to assess and improve security measures.
• Contribute to securing our cloud infrastructure, with a preference for Google Cloud Platform, applying CSPM and general cloud security best practices.
• Develop and maintain shell scripts (zsh or bash) for automation and security-related tasks.
• Establish, own and report on security-focused metrics, such as number and type of incidents, response times, SLA commitments, failed login attempts, or key rotation frequency.
• Document security configurations, procedures, and incidents.
• Own security-related policies and associated evidence and artifacts, including drafting and supporting policies critical to industry-standard audit programs and certifications.
• Participate in an on‑call rotation supporting nights and weekends.
• Shift working hours to participate in global team ceremonies such as Stand Up, Planning, Refinement, and Retrospectives.

Required Skills

• Associate's or Bachelor's of Science degree in a relevant field, or equivalent practical experience.
• 3–5 years of hands‑on experience in IT support, systems administration, or cybersecurity‑related positions.
• Demonstrable knowledge of Linux servers, preferably Ubuntu, including related usage and basic administrative tasks.
• Proficiency in a shell scripting language, such as zsh or bash.
• Familiarity with common security frameworks, such as MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, Cyber Kill Chain, Pyramid of Pain, or similar.
• Understanding of Cloud Security Posture Management (CSPM) and general Cloud Security practices in at least one major cloud provider, with a preference for Google Cloud Platform.
• Experience leveraging vulnerability and security scanning tools, such as Tenable Nessus and OpenVAS, as well as the more generic scanning categories of SAST, DAST, and SCA.
• Experience working with or as a Cybersecurity Analyst.
• Experience working in verticals such as infrastructure security, application security, mobile security, corporate endpoint security, or SaaS Security.
• Builder and ownership mentality.

Nice‑to‑Have Qualifications

• Experience administering macOS workstations.
• Experience securing corporate endpoints and workstations, such as Windows, macOS, Android, or iOS, especially in a hybrid work environment.
• Experience as a SysAdmin.
• Experience with programming or automation systems, such as Ansible, Python, or SaltStack.
• Experience building a highly available open source SIEM, such as Wazuh, Security Onion, or building from scratch leveraging technologies such as Graylog, ElasticSearch or OpenSearch, or similar.
• Experience responding to or managing IDS systems, such as Suricata, Zeek, Snort, Wazuh, Falco, or similar.
• Experience with DFIR tools, such as Velociraptor, OSQuery, or similar.
• Experience managing and owning the deployment and implementation of critical inline security systems – such as an IDP, WAF, or Taps – in a production environment.
• Experience with Kubernetes, either as a user or administrator, at a level equivalent to CKAD, CKA, or CKS.
• Experience in TPRM.
• Experience with industry‑standard auditing frameworks and certifications, such as SOC 2, ISO 27001, or ISO 42001.
• Experience using and/or security AI or LLM systems.

EEO Statement

Sauce Labs is proud to be an Equal Opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender identity/expression/status, sexual orientation, age, marital status, veteran status or disability status.