Security Engineering Lead

Maruti Suzuki; Gurugram District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Maruti Suzuki in Gurugram, Haryana is seeking a Security Engineering Lead to own the lifecycle, integration, optimization and operability of security tools powering the SOC. You will drive incidents, audits and continuous improvement across networks, endpoints, servers and cloud.

You will partner with SecMon, SecOps and vendors, manage ITSM, deliver training updates, and oversee architecture documentation from HLD to POV/POC results, ensuring 100% tool readiness and alignment with compliance

Qualifications

• Bachelor's degree; master's preferred; 3–6 years experience.
• Good knowledge of two or more security technologies: SIEM/SOAR, WAF, EASM, UEBA, EDR, CNAPP.
• Knowledge of security technologies and administration of security tools.
• Excellent communication and interpersonal skills with cross-functional collaboration.
• Strong project management with ability to manage multiple priorities and deadlines.
• Ability to stay updated with emerging digital technologies.
• Vendor & Supplier Management.

Responsibilities

• Security Operations: Tools uptime and baselining per best practices.
• User entity and behavior enrichment and its management.
• Logs management.
• Data sources and its end-to-end engineering.
• Global Threat Intelligence updates to all tools.
• Audit and compliance fulfillment when needed.
• Collaborate with SecMon and SecOps on quarterly/monthly tool changes.
• ITSM management (Incidents, Services, Changes and Problems).
• Support continuous improvement of security tools and handovers with other function leaders.
• Develop and implement year-on-year improvement plans with Network, endpoints, servers, and cloud.
• Collaborate with vendors/experts to create relevant security benchmarks.
• Update training content reflecting emerging trends and technologies.
• Oversee learning tech implementations to enhance digital learning.

Skills

SIEM/SOAR

WAF

EASM

UEBA

EDR

CNAPP

Project management

Communication skills

Vendor management

Education

Bachelor's degree

Master's degree preferred

Job description

The Security Engineering lead is responsible for the overall lifecycle, integration, optimization, and operational health of the technologies that power the security operations centre.

3. PRINCIPAL RESPONSIBILITIES (List the responsibilities associated with the job.)

• Security Operations:
• Tools Uptime and Baselining as per best practice assessment.
• User entity and behavior enrichment and its Management
• Logs Management
• Data Sources and its engineering end to end.
• Global Threat Intelligence autonomous updates to all security tools.
• Fulfillment of Audit and Compliance requirement as and when needed.
• Collaborate with SecMon and SecOps team to review quarterly/monthly the changes on tools respective to iServe change request 100%.
• ITSM Management (Incidents, Services, Changes and Problems)
• Help and Support the Continuous Improvement of Security Tools and Handovers:
• Develop & implement comprehensive improvement plan year on year in liasoning with other function leaders like Network, endpoints, servers, and cloud.
• Collaborate with vendors and subject matter experts to develop engaging and relevant relation security benchmark
• Continuously update training content to reflect emerging trends and technologies
• Oversee the implementation of learning technologies and platforms to enhance the digital learning experience for participants.
• Best Practice Assessment of Tools as suppliers baseline.
• Responsible for Program/tool Handover and handholding from Project team inclusive of implementation document, architecture, HLD, LLD, Use Cases, POV/POC results,

4. MAJOR CHALLENGES (Describe the major challenges you face on an on-going basis in carrying out your job.)

Fulfilment of audit and compliances requirement and timely execution delivery Security Tools Optimization, regular BPA (best practice assessment), Expansion Coridination Incident and Case Management KB Articles of Repetitive Problems, Incidents, Method of procedures, Change Management Internal Audit

5. DECISIONS (Mention the key decisions taken by job holder at his end and the decisions for which the job holder goes to superior with options and recommendations or seek approval).

Vendor Selection Stakeholder management Change Management

6. INTERACTIONS (The key working relationships or routine contacts a job holder needs to have INSIDE and OUTSIDE the organization to accomplish the job.)

Internal Clients Roles you need to interact with inside the organization to enable success in your day to day work Business verticals Senior Leadership Center of Excellence for a capability Audit and Compliance Team 3 Information Classification: Internal Security Operations Team Security Monitoring Team External Clients Roles you need to interact with outside the organization to enable success in your day to day work Security Tool Suppliers Technology Original Equipment Manufacturer. Incident Response Team

7. DIMENSIONS (List the significant numerical data which will reflect the scope and scale of activities concerning this job).

Financial Dimensions (These should be quantifiable numerical amounts like annual budgets, project costs, annual revenue, purchase value etc.). Other Dimensions (Indication of some of the significant volumes associated with the job like number in team/ staff handled etc). Individual Contributor Role

8. SKILLS AND KNOWLEDGE (State the minimum acceptable proficiency for this job which best indicates the education and/or experience requirements of this job and not the incumbent).

Educational Qualifications a) Qualifications Bachelors degree (master s degree preferred) - 3 to 6 years b) Work Experience Good Knowledge of any of two technologies SIEM/SOAR, WAF, EASM, UEBA. EDR, CNAPP. Knowledge of security technologies, tools, and administration of Security tools. Excellent communication and interpersonal skills, with the ability to collaborate cross-functionally and engage diverse stakeholders. Strong project management skills with the ability to manage multiple priorities and deadlines effectively. Ability to stay up to date with emerging trends in digital technologies Strong analytics skills with the ability to assess data and use it to inform training strategies Ability to work effectively with cross-functional teams and build relationship with stakeholders at all levels Vendor & Supplier Management