Senior Corporate Security Engineer

Nexthink; Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Health insurance

Hybrid work model

Unlimited vacation

Job summary

Nexthink in Bengaluru, India, is seeking a Senior Corporate Security Engineer to own the security of its internal environment. You will architect a scalable security fabric that supports rapid growth, not just monitor logs.

You will partner with IT, Cloud and Application Security teams to secure identity, devices and applications used by Nexthinkers worldwide. You will lead incident response, develop automation in Python/PowerShell and SOAR workflows, and drive vulnerability management across

Qualifications

• 7+ years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.

Responsibilities

• Lead incident response activities for corporate security events (phishing, malware, lost devices).
• Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions.
• Proactively hunt for threats within the corporate network and identity providers.
• Design and implement security controls to safeguard corporate resources across endpoints, data storage, networking, computing and IAM.

Skills

Endpoint hardening

Zero Trust

IR & SOC operations

Python

Communication

Threat hunting

Security training

Okta & Entra ID

Phishing awareness

Cloud security (Azure/AWS)

MDM/UEM (Intune/Jamf)

Tools

Terraform

EDR/XDR

SIEM

SOAR

CASB/DLP

Azure

AWS

Intune

Jamf

Job description

• Department: Corporate Security & Compliance
• Dept: Corporate Security & Compliance

Company Description

Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any applicationor network, before employees notice the issue. As the first solutionto allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,300 customers to provide better digital experiences to more than 18 millionemployees. Dual headquartered in Lausanne,Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide.

#LI-Hybrid

Job Description

As aSenior Corporate Security Engineerat Nexthink, you willbe responsible forthe security of our internal environment. Youwon'tjust bemonitoringlogs; you will be architecting the security fabric that enables our rapid growth.

Working in close partnership with IT, business teamsand,partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by "Nexthinkers" worldwide. You Will ownthesecurity ofa complex SaaS ecosystem, andleaddetection and response for the corporate environment.

What You Will Do

Identity-Centric SecurityArchitecture

• Contribute tothe designandsupporttheimplementation ofpasswordlessauthentication and Zero Trust principles.
• Manage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems.
• Partner with HR and IT to streamline onboarding/offboarding workflows, ensuringtimelyaccess revocation and auditability.
• Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf).
• Manage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers(Windows, Linux, macOS).
• Secure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment.
• Proactivelyidentifyand mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans.
• Coordinate vulnerability management and patch management
• Collaborate with IT to automate endpoint compliance checks and remediation workflows.

Security Engineering

• Support the development and maintenance ofInfrastructure-as-Code.
• Ensure hardening and complianceofendpoints and servers.

SaaSSecurity & Integration

• Collaborate with Legal and Compliance to vet new vendors and tools.
• Configure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity.

Detection, Response & Automation

• Lead incident response activities for corporate security events (phishing, malware, lost devices).
• Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions.
• Proactively hunt for threats within the corporate network and identity providers.
• Developincident responseplaybooksincludingtechnology specific procedures andforensics collection

Audits and Compliance

• Designand implement security controls to safeguard corporate resources, including endpoints,data storage, networking,computing andidentityand access management.
• Support and automate evidence collection for audits.
• Act as the primary security liaison to the IT Departmentandbusinessteams, helping them build security into their operations (DevSecOpsfor IT).
• Design and deliver technical security training and awareness campaigns for engineering and business teams.

Qualifications

• 7+ years of hands-on experience in Corporate Security, IT Security Engineering,or a SOC roleina cloud-first environment.
• Endpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools.
• Vulnerability management:Proven experience inhelping IT and businessteamspatching systems and infrastructures.
• Coding Skills:Proficiencyin PythonandTerraformfor automating APIs and security workflows.
• Security Ops: Proven experience with EDR tools and SIEM log analysis.
• Communication: Fluent in English with the ability to explain complex risks to non-technical stakeholders.
• Proven ability to influence and drive security best practices across non-security teams.
• Experience with security awareness training platforms and phishing simulation tools.

Bonus Points

• Identity Expertise: Deep technical knowledge of Okta and Microsoft Entra ID (Authentication policy,Conditional Access, SSO, SCIM, OIDC/SAML).
• Experience implementing FIDO2/WebAuthn(Passwordless).
• Familiarity with compliance standards (ISO 27001/27701, SOC 2,FedRAMP)
• Experience securing Cloud Infrastructure (Azure/AWS) specifically for internal/corporate workloads.

Why Join Nexthink Security?

• Impact: You will report directly into the CISO organization and have a tangible impact on the daily lives of employees and the safety of the company.
• Opportunity to work oncutting-edgesecurity projects, with visibility and support from executive leadership.
• Technology: We use top-tier security stacks. Youwon’tbe fighting with legacyon-premisehardware; we arecloud-native.
• Culture: We value "Security as an Enabler," not a blocker. You will work in a supportive, highly technical environment in our Madrid hub

Additional Information

We are the pioneers and trailblazers of a global IT Market Category (DEX) that is shaping the future of how the world works, giving our customers’ IT Teams total digital visibility across their enterprise. Our innovative solutions integrate real-time analytics, automation, and employee feedback across all endpoints. This enables our IT teams to solve complex technical challenges, create ever more productive workplaces, and deliver happy, satisfied employees in the digital workplace.

With over 1200 employees across 5 continents, Nexthink operates as One Team, connecting, collaborating and innovating to continuously grow. We call our employees ‘Nexthinkers’ and our commitment to diversity, inclusion, and equity is second to none. We currently have over 75 nationalities working with us, from all cultures and backgrounds, speaking many different languages.

If you are looking for a change and like a nice atmosphere, lots of challenges, and having fun while working, this is a great opportunity for you!Check what we offer:

Permanent Contract and a competitive compensation package.

Health insurance through our partnership with Bajaj, including OPD coverage for dental, vision, health check-ups, consultations, and pharmacy expenses.

Hybrid work model balancing office and remote work, with a structured approach for new hires to foster connections and onboarding.

Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 22days of holidays we offer). Plus, company-paid bank holidays (12), sick days (10-30), bereavement leave (5), and 3 days per year for volunteering.

Free access to professional training platforms to explore your interests and enhance your skills.

Stay covered against accidents, bodily injuries, and disabilities with our personal accident insurance policy, providing assurance with coverage up to three times your annual CTC.

New mothers are entitled to up to 26 weeks of maternity leave, with the flexibility to use up to 8 weeks before the expected delivery and the remaining 18 weeks after. Birth fathers can take 6 weeks of paternity leave, while adoptive parents are eligible for 26 weeks of leave for mothers and 6 weeks for fathers.

Under the Payment of Gratuity Act, receive gratuity at the rate of 15 days of basic pay for every completed year of service, provided you've been employed by the company for a minimum of 5 years. Gratuity is payable at retirement or resignation based on your last drawn basic pay.

Bonuses for referring successful hires after three months of continuous employment.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply