Senior Engineer- Cyber Defence

Egon Zehnder; Gurugram District; On-site; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

5 Days working in a Fast‑paced work环境

Work directly with the senior管理团队

Reward and Recognition

Employee friendly policies

Personal development and training

Health Benefits, Accident Insurance

Job summary

Egon Zehnder, Gurgaon-based, seeks a hands-on ServiceNow Developer to design, implement, and optimize ITSM/ITOM solutions in an enterprise environment. You will collaborate with Infrastructure, Networking, Cloud and Workplace Technology teams to enhance platform adoption and automation.

Ideal candidates will have strong ITSM/ITOM experience, automation skills, and a proactive mindset to improve service quality and data integrity across the ServiceNow ecosystem.

Qualifications

• 5-8 years of experience in Cyber Security focused on threat hunting, detection engineering, incident response, or SOC operations.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Strong experience with EDR/XDR solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon.
• Experience building detections and hunting use cases using KQL, Sigma, YARA, or similar technologies.
• Strong understanding of the MITRE ATT&CK framework and modern adversary TTPs.
• Proficiency in Python, PowerShell, or Bash for automation and integrations.

Responsibilities

• Lead proactive threat hunting activities across endpoint, network, identity, and cloud environments.
• Develop, optimise, and maintain high‑fidelity detections across SIEM, EDR/XDR, and SOAR platforms.
• Leverage MITRE ATT&CK to assess detection coverage and enhance monitoring capabilities.
• Analyse security telemetry using KQL, Sigma, YARA, and other detection technologies.
• Engineer, integrate, and manage cyber defence technologies including Microsoft Sentinel, Defender, CrowdStrike, SOAR, and Threat Intelligence platforms.
• Design and implement automation workflows and response playbooks to improve incident response.

Skills

Threat Hunting

Detection Engineering

Incident Response

SOC Operations

Python

PowerShell

Bash

Windows

Tools

Microsoft Sentinel

CrowdStrike Falcon

MITRE ATT&CK

SOAR

KQL

Sigma

YARA

Azure

AWS

Job description

The Company

Egon Zehnder is the world’s preeminent leadership advisory firm, inspiring leaders to navigate complex questions with human answers. We have more than 560+ consultants who bring together vast industry experience and diverse insight, operating globally through 68 offices in 36 countries spanning across Europe, the Americas, Asia Pacific, the Middle East, and Africa. We believe that together we can transform people, organizations, and the world through leadership. Our clients range from the largest corporations to emerging growth companies, government and regulatory bodies, and major educational and cultural institutions. We collaborate as One Firm across industries and geographies, leveraging strengths of every colleague and operate as a private partnership independent of any outside interests.

Knowledge Centre India (KCI)

Knowledge Center India (KCI) is the central engine that drives the operational value for the firm. Established in 2004, KCI has evolved over the years from purely operational efficiencies into more value-added service offerings, becoming a true business partner. There are various teams based at KCI that work with Global Offices, Practice Groups, and the Management across all aspects of the firm's business life cycle. With a headcount of more than 500, the center has 5 core teams working including Experts, Research Operations, Visual Solutions, Projects/CV Capture and Digital IT, working round the clock on many mission critical elements.

Your Journey at Egon Zehnder Starts Here

At EZ, you have the opportunity to deliver digital transformation initiatives across the globe for the organization. Our focus on emerging technology solutions along with our commitment to internal career growth and exceptional client value.

Who we are!

We are part of Digital-IT team established 17 years ago in Gurgaon, India to provide technology support and rollout digital initiatives to 60 plus global offices. Digital IT has six key pillars – Functional Technology; Digital Technology; Security & Architecture; Infrastructure & Services and Digital Success & Collaboration Technology to support business and to take lead on digital transformation initiatives with the total strength of 200+ team members across the globe.

The Position

We are looking for a hands‑on ServiceNow Developer with strong experience across ITSM processes development and ITOM capabilities, particularly CMDB, Discovery and Service Mapping. The role involves developing, administering, and continuously improving the ServiceNow platform in an enterprise environment, with a focus on service quality, automation, and data integrity. The ideal candidate will work closely with operations, infrastructure, and application teams to enhance platform adoption, optimise processes, and ensure ServiceNow effectively supports business and IT operations.

Key Responsibilities

• Lead proactive threat hunting activities across endpoint, network, identity, and cloud environments to identify advanced threats and malicious activity.
• Develop, optimise, and maintain high‑fidelity detections across SIEM, EDR/XDR, and SOAR platforms.
• Leverage frameworks such as MITRE ATT&CK to assess detection coverage and enhance monitoring capabilities.
• Analyse security telemetry using KQL, Sigma, YARA, and other detection technologies to identify indicators of compromise and attack patterns.
• Engineer, integrate, and manage cyber defence technologies, including Microsoft Sentinel, Microsoft Defender, CrowdStrike, SOAR, and Threat Intelligence platforms.
• Design and implement automation workflows and response playbooks to improve operational efficiency and accelerate incident response.
• Partner with Infrastructure, Network, Cloud, and Workplace Technology teams to strengthen security visibility and telemetry coverage.
• Act as a senior technical escalation point for complex security incidents and investigations.
• Translate threat intelligence into actionable detections, threat hunting use cases, and security controls.
• Conduct root cause analysis and drive continuous improvement through post‑incident reviews and lessons learned.
• Participate in purple team exercises and adversary simulations to validate and improve detection effectiveness.
• Develop security metrics, dashboards, and reports to measure cyber defence maturity and operational effectiveness.
• Mentor junior team members and contribute to the evolution of Cyber Defence Engineering practices and standards.

What We're Looking For

• 5-8 years of experience in Cyber Security with a focus on Threat Hunting, Detection Engineering, Incident Response, or SOC Operations.
• Hands‑on experience with SIEM platforms, preferably Microsoft Sentinel.
• Strong experience with EDR/XDR solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon.
• Experience building detections and hunting use cases using KQL, Sigma, YARA, or similar technologies.
• Strong understanding of the MITRE ATT&CK Framework, Cyber Kill Chain, and modern adversary TTPs.
• Proficiency in Python, PowerShell, or Bash for automation and integrations.
• Solid knowledge of Windows, Linux, Active Directory, Entra ID, Identity Security, Networking, and Azure/AWS cloud environments.
• Experience with security automation, orchestration, and incident response processes.

Preferred Certifications

• Microsoft Security Certifications (SC-200, SC-100, SC-300)
• CrowdStrike Falcon Administrator or Falcon Responder
• Certifications GCIH, GCDA, GCTI, or CTIA
• CISSP (preferred)

Key Competencies

• Strong analytical and investigative mindset with a passion for cyber defence.
• Excellent problem‑solving and critical‑thinking skills.
• Ability to communicate technical concepts to both technical and non-technical stakeholders.
• Strong collaboration and stakeholder management skills.
• Passion for continuous learning and staying ahead of the evolving threat landscape.

Benefits which make us unique

At EZ, we know that great people are what makes a great firm. We value our people and offer employees a comprehensive benefits package. Learn more about what working at Egon Zehnder can mean for you!

Benefits Highlights

• 5 Days working in a Fast‑paced work environment
• Work directly with the senior management team
• Reward and Recognition
• Employee friendly policies
• Personal development and training
• Health Benefits, Accident Insurance

Potential Growth for you!

We will nurture your talent in an inclusive culture that values diversity. You will be doing regular catchups with your Manager who will act as your career coach and guide you in your career goals and aspirations.

Location

The position is based at Egon Zehnder’s KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.

EZIRS Commitment to Diversity & Inclusion

Egon Zehnder Information Research & Services (EZIRS) aims for a diverse workplace and strive to continuously lead with our firm values. We respect personal values of every individual irrespective of race, national or social origin, gender, religion, political or other opinion, disability, age and sexual orientation as warranted by basic rights enshrined in the UN Declaration of Human Rights. We believe diversity of our firm is central to the success and enables us to deliver better solutions for our clients. We are committed to creating an inclusive environment and supportive work environment, where everyone feels comfortable to be themselves and treated with dignity and respect and there is no unlawful discrimination related to employment, recruitment, training, promotion or remuneration.

Egon Zehnder is an Equal Opportunity Employer

Egon Zehnder provides equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, disability, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.