Security Engineer (SOC + Linux and Kubernetes)

Ericsson; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Ericsson’s Mobile Financial Services (MFS) team seeks a Security Specialist Engineer to safeguard the Ericsson Wallet Platform used by operators and banks globally. You will contribute to security operations, incident management, patching, and maintenance across a cloud-native stack.

The role emphasizes triage, threat hunting, IAM controls, Kubernetes and Linux expertise, and collaboration in a shift-based, customer-focused environment to ensure service reliability and compliance with industry

Qualifications

• Bachelor’s degree required or equivalent in IT/CS field.
• 2–5 years of IT security experience, SOC/NOC or service ops preferred.
• Hands-on Linux, Kubernetes, AWS, and cloud security fundamentals.

Responsibilities

• Perform advanced triage and investigation of escalated security incidents.
• Develop and fine-tune SIEM detection rules and security use cases.
• Manage IAM controls, RBAC, least privilege, MFA, conditional access, and access reviews.
• Review and harden cloud resources, including VMs, storage, databases, Kubernetes, and serverless environments.
• Coordinate incident containment, eradication, recovery, and remediation activities.
• Troubleshoot, reproduce, and resolve software and security issues while validating fixes and maintaining service operability.

Skills

Troubleshooting

Root-cause analysis

Documentation

Communication

Stakeholder management

Education

Bachelor’s degree in Software Engineering, Computer Science, or a related field

Tools

Linux

Kubernetes

Docker

SIEM

HSM

Cloud security tooling

Job description

Join Ericsson’s Mobile Financial Services (MFS) team, where technology enables financial inclusion for millions of users across Africa, the Middle East, and Latin America. As a Security Specialist Engineer, you will support the security, reliability, and operational excellence of the Ericsson Wallet Platform, used by leading operators and banks for mobile financial services.

You will work in a global operations environment, contributing across the solution lifecycle, including security operations, troubleshooting, patching, upgrades, maintenance, and incident management.

What you will do

• Perform advanced triage and investigation of escalated security incidents.
• Conduct threat hunting and correlate security events across SIEM, EDR, firewalls, IDS/IPS, endpoints, cloud, and email security tools.
• Develop and fine-tune SIEM detection rules and security use cases.
• Analyze malware, suspicious artifacts, user behavior, and cloud activities.
• Coordinate incident containment, eradication, recovery, and remediation activities.
• Manage IAM controls, RBAC, least privilege, MFA, conditional access, and access reviews.
• Review and harden cloud resources, including VMs, storage, databases, Kubernetes, and serverless environments.
• Investigate CSPM findings, audit logs, vulnerabilities, and policy violations, and track remediation.
• Troubleshoot, reproduce, and resolve software and security issues while validating fixes and maintaining service operability.
• Support customer SLAs and KPIs, lead incident bridges, and provide timely stakeholder updates.
• Contribute to patching, upgrades, maintenance, and continuous improvement of the solution.
• Participate in the operational shift roster to ensure service and security coverage.

What you will bring

• Bachelor’s degree in Software Engineering, Computer Science, or a related field.
• 2 - 5 years of experience in IT security, preferably within a SOC/NOC or service operations environment.
• Strong hands-on experience with Linux and Kubernetes, along with knowledge of cryptography, vulnerability management, SIEM, security audits, and HSM.
• Experience with cloud/SaaS security operations; AWS experience is preferred.
• Good understanding of SSL/TLS, PKI, certificate management, TCP/IP and networking.
• Experience with Docker/Kubernetes and security technologies such as SIEM, firewalls, IDS/IPS, vulnerability scanners, and endpoint security.
• Knowledge of security and compliance frameworks including PCI, CIS, NIST, and ISO.
• Scripting experience with Shell, Python, or Ansible is an advantage.
• Strong troubleshooting, root-cause analysis, documentation, communication, and stakeholder-management skills.
• Knowledge of ITIL and service operations processes such as incident, problem, event, change, and knowledge management is desirable.
• Collaborative, adaptable, customer-focused, and comfortable working in a shift-based operational environment.

“All academic credentials must be from recognized and accredited institutions and are further subject to verification.”