Senior Cyber Security Engineer

FutureX; Chennai District; Sur place; INR 1 800 000 - 3 200 000; Plein temps

Résumé du poste

FutureX seeks a Senior Cyber Security Engineer to design, implement, and maintain IT security infrastructure, safeguarding digital assets and ensuring regulatory compliance. The role focuses on threat detection, incident response, and risk management while coordinating with cross-functional teams.

The ideal candidate has 6–8 years in cybersecurity, advanced certifications, and hands-on expertise with SIEM, forensics, and network security.

Qualifications

• Hands-on experience designing and maintaining SecOps infrastructure.
• Experience leading incident-response and threat-hunting activities.
• Strong knowledge of security controls, audits, and compliance requirements.

Responsabilités

• Configure and maintain security tools (SIEM, gateways, threat detection).
• Lead monitoring of security events and logs for threats and incidents.
• Direct incident-response activities to contain and mitigate threats quickly.

Connaissances

SIEM

Incident response

Threat hunting

Security policy

Leadership

Risk management

Formation

CEH

CISSP

CompTIA Security+

Outils

SIEM

EDR/IDS

Description du poste

The Senior Cyber Security Engineer plays a crucial role in safeguarding the organization's digital assets. The position is responsible for designing, implementing, and maintaining IT security infrastructure to prevent, detect, and manage cyber threats. The role calls for deep knowledge of network and software security vulnerabilities, together with strong incident-response and risk-management skills. Working closely with teams across the organisation, the Senior Cyber Security Engineer helps develop and enforce security policies, conduct security audits, and ensure compliance with regulatory standards.

Job Dimensions

• Reports to: IT Security Manager
• Direct reports: 3
• Indirect reports: 0
• Function: Cybersecurity / Security Operations

Key Accountabilities

Security Configuration, Monitoring & Management

• Configure, fine-tune, and maintain security tools and technologies, including SIEM, email security gateway, and advanced threat-detection systems.
• Lead and supervise the monitoring of security events and logs to identify suspicious activity and potential threats.
• Direct the SecOps team during incident-response efforts, ensuring rapid containment and mitigation of threats.
• Proactively hunt for undetected threats in the environment, applying knowledge of the latest attacker techniques and tools.
• Aggregate logs from multiple sources into a centralized SIEM system.
• Develop and implement correlation rules to identify complex threats, and customize alerts for events that warrant immediate action.
• Periodically review and update security policies, particularly after an incident or a major change in the environment.
• Analyze and recommend security controls and procedures across the acquisition, development, and change-management lifecycle of information systems, and monitor for compliance.

Governance

• Contribute to the creation, review, and updating of IT security policies, procedures, and protocols, keeping them aligned with current industry best practices and regulatory requirements.
• Monitor and enforce compliance with security policies and procedures, providing guidance to ensure adherence to frameworks such as ISO 27001 and NIST.
• Oversee and evaluate the effectiveness of security measures, recommending improvements and ensuring quality control throughout.
• Promote security awareness across the organization and help develop and deliver security-training programs for staff.
• Perform routine security audits of the infrastructure and present findings.

Reporting & Documentation

• Develop and maintain comprehensive documentation for all incident-response activities.
• Analyze historical data to identify trends and anticipate potential future threats.
• Craft clear, strategic, and technical reports for executive leadership, providing insight into security operations and the threat landscape.
• Support internal and external audits by preparing the necessary documentation and evidence.
• Develop and maintain metrics and dashboards to track the performance and effectiveness of the cybersecurity program.

Problem Resolution & Troubleshooting

• Provide guidance and support to junior team members in resolving complex issues.
• Conduct in-depth root-cause analyses for security incidents and system compromises.
• Collaborate with IT and network teams to develop and implement fixes and long-term solutions to security challenges.
• Continuously improve the incident-resolution process through automation, process refinement, and tool upgrades.

Training & Development

• Ensure all certifications required for the role are met within 6 months of joining and kept valid thereafter.
• Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required.
• Stay current with the field through continuous learning and participation in technical events.

Span of Communication

• Internal: FutureX internal teams
• External: Customers

Qualifications, Experience & Skills

Required Qualifications & Certifications

• CompTIA Security+
• EC-Council Certified Ethical Hacker (CEH)
• Certified Information Systems Security Professional (CISSP)

(Certifications must be held or obtained within 6 months of joining.)

Required Experience

• 6–8 years of experience in cybersecurity

Required Skills

• Ability to analyse and interpret complex information from various sources and understand its impact on IT security operations
• Fluent spoken and written English
• Ability to articulate technical information effectively to a range of audiences, including non-technical stakeholders
• Proven leadership skills, with the ability to guide, mentor, and motivate a team of analysts
• Effective time management and the ability to prioritise tasks in a high-pressure environment
• Advanced knowledge of SIEM
• Forensic analysis
• Network security
• Compliance and risk management

Other Requirements

• Vendor certifications for widely used security tools and technologies are beneficial
• Some travel and possible project work at customers' offices