Security Engineer

Giesecke+Devrient; Gurugram District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Giesecke+Devrient (G+D) is seeking a Security Engineer for the Cyber Defense Center. The role supports POCs, new security tool integrations, and automation initiatives across cloud and on-prem environments, aligning with enterprise and SOC maturity goals.

You will collaborate with SOC Operations, TVM, and cloud engineering to design, test, and operationalize secure, scalable security solutions, including decoy environments and CI/CD integration.

Qualifications

• 5–10 years of experience in Security Engineering, SOC, TVM, or Cyber Defense roles.
• Hands-on experience with security engineering, SOC technologies, or security architecture.
• Experience with API integrations, scripting, or automation (Python, PowerShell, Bash, or similar).
• Hands-on experience with one or more cloud platforms (Azure, AWS, or GCP).
• Strong understanding of Identity and Access Management concepts and technologies.
• Knowledge of network, endpoint, cloud, and identity security fundamentals.
• Familiarity with deception technologies, honeypots, or attack simulation is a strong plus.
• Experience with Microsoft Security technologies including Defender XDR, Sentinel, Entra ID.
• Knowledge of cloud-native security controls and container security.
• Familiarity with data engineering concepts and modern analytics platforms.
• Exposure to SOC maturity models, NIST, MITRE ATT&CK, and modern detection engineering practices.

Responsibilities

• Support security controls across cloud environments (Azure, AWS, and/or GCP).
• Assess cloud configurations and workloads for security risks and compliance gaps.
• Collaborate with cloud engineering teams to implement secure-by-design principles.
• Support CNAPP initiatives and remediation programs.
• Act as a technical consultant in the CDC by evaluating, designing, and implementing security solutions aligned with enterprise and SOC maturity goals.
• Support POCs, pilots, and technical evaluations of new security tools, platforms, and capabilities across network, endpoint, cloud, identity, and application security domains.
• Contribute to new integrations between security platforms (SIEM, SOAR, EDR/XDR, TVM, Threat Intelligence, CMDB, ITSM, etc.).
• Translate operational gaps into engineering or automation opportunities.
• Design and set up decoy / deception environments (honeypots, honeytokens, deceptive assets) to enhance threat detection and adversary engagement.
• Contribute to SOAR workflows, scripts, APIs, and integrations (custom or vendor‑provided).
• Drive innovation initiatives such as AI/ML‑assisted detection, analytics enrichment, and contextual correlation.
• Document architectures, POCs, integration patterns, and operational handover artifacts.
• Assist in the design, implementation, and governance of identity security controls.
• Support authentication, authorization, SSO, MFA, and privileged access management initiatives.
• Monitor and analyze identity‑related security events and anomalies.
• Contribute to identity governance, role management, and access review processes.
• Develop dashboards, reports, and visualizations to provide actionable security insights.
• Work with SIEM, data lake, and analytics platforms to improve visibility across security domains.
• Support executive and operational reporting requirements.

Skills

Security engineering

SOC technologies

Automation scripting

Cloud platforms

IAM concepts

Network security

Deception tech

Microsoft security tools

Cloud-native security

Data analytics concepts

Regulated environments

Threat modelling

Tools

Azure

AWS

GCP

PowerShell

Python

Bash

Microsoft Defender XDR

Microsoft Sentinel

Entra ID

Azure Security services

Job description

G+D makes the lives of billions of people around the world more secure. We create trust in the digital age with integrated security technologies in three business areas: Digital Security, Financial Platforms and Currency Technology. We have been a reliable partner for our customers for over 170 years with our innovative solutions for SecurityTech! We are an international technology group and traditional family business with over 14,000 employees in 40 countries. Creating Confidence is our path to success. Trust is the basis of our co-operation within G+D. The whole world trusts us when it comes to physical or digital currencies. We increase the security and efficiency of the cash cycle in collaboration with central banks and the entire currency industry. As the market leader in advanced currency management, would you like to join us in shaping the future of payments?

Job Title

Security Engineer

Role Summary

The Security Engineer will act as a technical enabler and innovation catalyst across the Cyber Defense Center. This role is responsible for supporting proof-of-concepts (POCs), new security tool integrations, strategic projects, automation initiatives, and advanced SOC capabilities. The role will closely collaborate with SOC Operations, Threat & Vulnerability Management (TVM) to design, test, and operationalize next-generation security solutions, including decoy and deception environments as part of a mature SOC vision. This role bridges strategy, engineering, and operations, ensuring that security capabilities are scalable, integrated, and future‑ready.

Key Responsibilities

• Support the implementation and continuous improvement of security controls across cloud environments (Azure, AWS, and/or GCP).
• Assess cloud configurations and workloads for security risks and compliance gaps.
• Collaborate with cloud engineering teams to implement secure‑by‑design principles.
• Support CNAPP initiatives and remediation programs.
• Act as a technical consultant in the CDC by evaluating, designing, and implementing security solutions aligned with enterprise and SOC maturity goals.
• Support POCs, pilots, and technical evaluations of new security tools, platforms, and capabilities across network, endpoint, cloud, identity, and application security domains.
• Contribute to new integrations between security platforms (SIEM, SOAR, EDR/XDR, TVM, Threat Intelligence, CMDB, ITSM, etc.).
• Translate operational gaps into engineering or automation opportunities.
• Design and set up decoy / deception environments (honeypots, honeytokens, deceptive assets) to enhance threat detection and adversary engagement.
• Contribute to SOAR workflows, scripts, APIs, and integrations (custom or vendor‑provided).
• Drive innovation initiatives such as AI/ML‑assisted detection, analytics enrichment, and contextual correlation.
• Document architectures, POCs, integration patterns, and operational handover artifacts.
• Assist in the design, implementation, and governance of identity security controls.
• Support authentication, authorization, Single Sign-On (SSO), Multi‑Factor Authentication (MFA), and privileged access management initiatives.
• Monitor and analyze identity‑related security events and anomalies.
• Contribute to identity governance, role management, and access review processes.
• Develop dashboards, reports, and visualizations to provide actionable security insights.
• Work with SIEM, data lake, and analytics platforms to improve visibility across security domains.
• Support executive and operational reporting requirements.

Required Skills & Experience

• 5–10 years of experience in Security Engineering, SOC, TVM, or Cyber Defense roles.
• Strong hands‑on experience in security engineering, SOC technologies, or security architecture.
• Experience with API integrations, scripting, or automation (Python, PowerShell, Bash, or similar).
• Hands‑on experience with one or more cloud platforms (Azure, AWS, or GCP).
• Strong understanding of Identity and Access Management concepts and technologies.
• Knowledge of network, endpoint, cloud, and identity security fundamentals.
• Familiarity with deception technologies, honeypots, or attack simulation is a strong plus.
• Experience with Microsoft Security technologies including Microsoft Sentinel, Defender XDR, Entra ID, and Azure Security services.
• Knowledge of cloud‑native security controls and container security.
• Familiarity with data engineering concepts and modern analytics platforms.
• Experience in global enterprise or regulated environments is an advantage.
• Exposure to SOC maturity models, Threat Modelling, NIST, MITRE ATT&CK, and modern detection engineering practices.
• Exposure to compliance frameworks is a plus.

Key Competencies

• Ability to work across operations, engineering, and strategy teams.
• Strong analytical mindset with the ability to convert problems into engineering or automation solutions.
• Experience supporting POCs, vendor evaluations, and technical decision‑making.
• Excellent documentation and communication skills.
• Continuous learning mindset with a passion for automation and innovation.
• Ability to work effectively in a global and cross‑functional environment.