Security Engineer

Selby Jennings; Maharashtra; Sur place; INR 1 200 000 - 2 400 000; Plein temps

Résumé du poste

Selby Jennings is seeking a seasoned cybersecurity engineer to monitor, investigate and respond to threats across enterprise systems and networks. You will lead threat hunting, incident investigations and adversary emulation to test detection capabilities and reduce risk.

The role requires hands-on SIEM experience (Splunk/ELK), Python automation and Linux security expertise. Expect a dynamic, on-call environment with collaboration across engineering and security teams.

Qualifications

• Minimum 5 years of hands-on experience in cybersecurity engineering, security operations, threat detection or incident response.
• Strong technical knowledge of threat hunting, incident response and security monitoring.
• Practical experience with red teaming, penetration testing or adversary simulation techniques.
• Hands-on experience with SIEM and log analysis platforms, preferably Splunk or ELK.
• Proficiency in Python scripting for security automation and technical investigations.
• Strong understanding of Linux environments, command-line tools, operating system security and network security fundamentals.
• Experience investigating security incidents, identifying indicators of compromise and analysing suspicious activities.
• Familiarity with cyber threat intelligence, attack techniques and security detection methodologies.
• Understanding of AI security threats, vulnerabilities and associated security controls.
• Experience assessing technical security controls and supporting cybersecurity risk, compliance or regulatory requirements.
• Knowledge of recognised cybersecurity frameworks, including NIST and CIS Controls.

Responsabilités

• Monitor, investigate and respond to cybersecurity threats, suspicious activities and security incidents across enterprise systems and networks.
• Conduct proactive threat hunting, threat intelligence analysis and incident investigations to identify potential security risks.
• Perform adversary emulation, purple teaming and security testing to assess detection capabilities and identify security weaknesses.
• Develop and enhance threat detection use cases, monitoring rules and incident response processes.
• Analyse security logs and events using SIEM platforms such as Splunk and ELK.
• Develop automation scripts and security tools using Python to improve threat detection, investigation and response capabilities.
• Investigate endpoint, network and Linux-based security events, including anomalous system behaviours.
• Assess existing security controls against recognised cybersecurity frameworks and regulatory requirements.
• Identify security gaps, recommend technical remediation measures and support implementation with engineering teams.
• Evaluate emerging cybersecurity threats, including AI-related security risks, and recommend appropriate mitigation controls.
• Support security incident documentation, technical reporting and periodic on-call incident response activities.

Connaissances

Threat hunting

Incident response

Security monitoring

Red teaming

Penetration testing

Python scripting

Linux fundamentals

Threat intelligence

MITRE ATT&CK knowledge

Compliance & risk awareness

Outils

Splunk

ELK

SIEM tooling

Python tooling

Description du poste

Monitor, investigate and respond to cybersecurity threats, suspicious activities and security incidents across enterprise systems and networks.

Conduct proactive threat hunting, threat intelligence analysis and incident investigations to identify potential security risks.

Perform adversary emulation, purple teaming and security testing to assess detection capabilities and identify security weaknesses.

Develop and enhance threat detection use cases, monitoring rules and incident response processes.

Analyse security logs and events using SIEM platforms such as Splunk and ELK.

Develop automation scripts and security tools using Python to improve threat detection, investigation and response capabilities.

Investigate endpoint, network and Linux-based security events, including anomalous system behaviours.

Assess existing security controls against recognised cybersecurity frameworks and regulatory requirements.

Identify security gaps, recommend technical remediation measures and support implementation with engineering teams.

Evaluate emerging cybersecurity threats, including AI-related security risks, and recommend appropriate mitigation controls.

Support security incident documentation, technical reporting and periodic on-call incident response activities.

Key Responsibilities

• Monitor, investigate and respond to cybersecurity threats, suspicious activities and security incidents across enterprise systems and networks.
• Conduct proactive threat hunting, threat intelligence analysis and incident investigations to identify potential security risks.
• Perform adversary emulation, purple teaming and security testing to assess detection capabilities and identify security weaknesses.
• Develop and enhance threat detection use cases, monitoring rules and incident response processes.
• Analyse security logs and events using SIEM platforms such as Splunk and ELK.
• Develop automation scripts and security tools using Python to improve threat detection, investigation and response capabilities.
• Investigate endpoint, network and Linux-based security events, including anomalous system behaviours.
• Assess existing security controls against recognised cybersecurity frameworks and regulatory requirements.
• Identify security gaps, recommend technical remediation measures and support implementation with engineering teams.
• Evaluate emerging cybersecurity threats, including AI-related security risks, and recommend appropriate mitigation controls.
• Support security incident documentation, technical reporting and periodic on-call incident response activities.

Technical Requirements

• Minimum 5 years of hands-on experience in cybersecurity engineering, security operations, threat detection or incident response.
• Strong technical knowledge of threat hunting, incident response and security monitoring.
• Practical experience with red teaming, penetration testing or adversary simulation techniques.
• Hands-on experience with SIEM and log analysis platforms, preferably Splunk or ELK.
• Proficiency in Python scripting for security automation and technical investigations.
• Strong understanding of Linux environments, command-line tools, operating system security and network security fundamentals.
• Experience investigating security incidents, identifying indicators of compromise and analysing suspicious activities.
• Familiarity with cyber threat intelligence, attack techniques and security detection methodologies.
• Understanding of AI security threats, vulnerabilities and associated security controls.
• Experience assessing technical security controls and supporting cybersecurity risk, compliance or regulatory requirements.
• Knowledge of recognised cybersecurity frameworks, including NIST and CIS Controls.

Good to Have

• Experience working in highly regulated environments, particularly financial services or technology-intensive organisations.
• Familiarity with MITRE ATT&CK, threat intelligence platforms and advanced detection engineering practices.
• Knowledge of SEBI Cybersecurity and Cyber Resilience Framework (CSCRF).
• Experience with EDR/XDR platforms, endpoint forensics and network traffic analysis.
• Exposure to security testing frameworks, vulnerability assessment tools and purple teaming methodologies.
• Experience building automated security workflows, detection pipelines or incident response integrations.
• Relevant certifications such as OSCP, GCIH, GCFA, GCIA, CISSP or equivalent.