Senior Cyber Security Engineer

Playsimple Games; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Playsimple Games is seeking a hands-on Security Engineer to own security operations across endpoints, identity systems, and SaaS apps. You will optimize CrowdStrike policies, respond to incidents, and automate workflows while reducing risk in a fast-growing environment.

Responsibilities span endpoint security, IAM, SaaS risk management, incident detection, and automation. You will build playbooks, dashboards, and proactive controls, collaborating with the security and engineering teams to raise

Qualifications

• 8–10 years in security engineering / blue team / endpoint security.
• Experience in SaaS-heavy or cloud-first environments preferred in product and growth strategies.

Responsibilities

• Own endpoint security: manage CrowdStrike policies, respond to alerts, perform RCA and improve detection.
• Secure identity and access: enforce MFA, least-privilege, periodic access reviews.

Skills

Security engineering

Blue team

Incident response

SaaS security

Cloud security

Automation scripting

Tools

CrowdStrike

JumpCloud

Okta/Azure AD

ManageEngine OpsManager

EDR

Job description

We are looking for a hands‑on security engineer who can operate, build, and automate security across endpoints, identity systems, and SaaS applications. This role will own security operations using tools like CrowdStrike, JumpCloud, ManageEngine OpsManager, and our SaaS ecosystem. You will not just respond to alerts; you will improve detection, reduce risk, and automate security workflows.

The core responsibilities for the job include the following:

Endpoint Security (Primary Ownership):

• Manage and optimize policies in CrowdStrike.
• Investigate and respond to endpoint alerts (malware, suspicious behavior, lateral movement).
• Perform root cause analysis and prevent recurrence.
• Improve detection coverage using behavioral rules and threat intelligence.

Identity and Access Security:

• Secure user lifecycle management via JumpCloud.
• Enforce MFA across all systems, least-privilege access, and device trust policies.
• Design and execute periodic access reviews.
• Investigate identity-related incidents (account compromise, privilege misuse).

SaaS Security and Risk Management:

• Audit and secure SaaS platforms (Google Workspace, Slack, Zoom, etc. ).
• Identify and remediate: Over-permitted users, risky OAuth integrations, and public data exposure.
• Define SaaS security baselines and governance controls.

Incident Detection and Response:

• Own the full incident lifecycle:
• Detection Triage Containment Recovery RCA.
• Build and maintain incident response playbooks.
• Partner with the Service Desk for rapid containment actions.
• Continuously improve response time and accuracy.

Security Automation (Core Expectation):

• Automate:
• User offboarding (access revocation + device lockdown).
• Alert-driven responses (via EDR and identity tools).
• Access reviews and compliance checks.
• Reduce manual effort and improve consistency across security operations.

Monitoring, Visibility, and Correlation:

• Correlate signals from CrowdStrike (endpoint).
• ManageEngine OpManager (infra/network), SaaS audit logs.
• Build meaningful dashboards and alerts.
• Improve signal-to-noise ratio (reduce alert fatigue).

Policy, Hardening, and Compliance:

• Define and enforce: Endpoint hardening standards, identity and access policies, and incident response procedures.
• Support audits (ISO/SOC2 if applicable).
• Ensure continuous improvement of security posture.

Requirements:

• 8-10 years in security engineering / blue team/endpoint security
• Experience in SaaS-heavy or cloud-first environments preferred in product and growth strategies.

Core Technical Skills:

• Strong hands-on experience with CrowdStrike (or similar EDR like SentinelOne and Defender) and JumpCloud/Okta/Azure AD, and real-world incident response experience (not just theoretical SOC work).
• Deep understanding of endpoint attack techniques, identity-based attacks, and SaaS security risks.

Automation and Engineering Mindset:

• Experience with scripting (Python / Bash / PowerShell).
• Ability to automate workflows and integrate tools.
• Strong problem-solving and system-thinking approach.

Security Fundamentals:

• MITRE ATT& CK framework understanding.
• Endpoint detection and response concepts.
• Identity and access management principles (SSO, MFA, RBAC).