Senior Information Security Engineer

Rubrik; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Rubrik is seeking a Senior Security Engineer in Bengaluru to bridge traditional Security Operations and Data Engineering. Responsibilities include managing SIEM operations and developing a Security Data Lake architecture. Candidates should have over 5 years of experience in Security Ops, proficiency with SIEM platforms like Splunk, and knowledge of cloud data warehousing using Snowflake or BigQuery. This role emphasizes collaboration across teams and requires strong programming skills including Python and Shell scripting.

Qualifications

• 5+ years in Security Ops and Engineering, focusing on Security Data management and Automation.
• Hands-on experience with at least one market-leading SIEM and SOAR platform.
• Practical experience administering or developing within major cloud data warehouses.
• Proficiency in Python and Shell scripting.
• Solid experience in one major cloud (AWS/GCP/Azure).

Responsibilities

• Handle day-to-day operations of market-leading SIEM platforms.
• Develop and maintain the infrastructure that moves security telemetry to cloud warehouses.
• Integrate AI tools and automate SecOps tasks.
• Collaborate with global teams and manage stakeholder communication.

Skills

Security Ops and Engineering

SIEM Administration

Cloud Data Warehousing

Programming (Python, Shell)

AI Integration

Tools

Splunk

Snowflake

BigQuery

Databricks

Job description

• The Information Security organization advances the overall state of security at Rubrik through critical initiatives and the coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
• We are seeking a Senior Security Engineer to bridge the gap between traditional Security Operations and modern Data Engineering. You will be responsible for the day-to-day health of our SIEM ecosystem while simultaneously contributing in transition toward a Security Data Lake architecture. This is a hands‑on, high-impact role that leverages Programming, Cloud Warehouses and AI to defend a global multi-cloud footprint.

What you’ll do?

• SIEM Administration: Handle day-to-day operations of market‑leading SIEM platforms (e.g., Splunk, Sentinel, or Chronicle). This includes log ingestion from a variety of sources like Network devices, 3rd party vendor APIs, Cloud Services, Webhooks etc.. parsing/normalisation to a common schema, health monitoring checks, User access management and Cost Monitoring.
• Security Data Lake Operationalisation: Develop and maintain the infrastructure/Platform that moves security telemetry from raw sources into Snowflake, BigQuery, or Databricks. Tune/Optimise Ingestion at Scale for cost efficiency and enable SOC team and Threat Detection team to leverage the Security Data lake for their Search and Analytics workloads.
• AI & Agentic Automation: Proactively integrate AI tools and LLMs into daily workflows; develop AI agents to automate Tier 1/2 SecOps tasks like Incident Investigation and Response.
• Cross-Team Collaboration: Partner with global teams across time zones and manage Stakeholder communication.

Experience you'll need:

• Experience: 5+ years in Security Ops and Engineering, focusing on Security Data management and Automation.
• SIEM and SOAR Mastery: Hands‑on experience with at least one market‑leading SIEM (Splunk, Microsoft Sentinel, Elastic) and SOAR platform (Palo Alto XSOAR, Splunk SOAR).
• Cloud Data Warehousing: Practical experience administering or developing within Snowflake, BigQuery, and/or Databricks. Prior experience in building/maintaining data platforms that can manage 50‑100 TB/day data is a big plus.
• Programming: Strong proficiency in Python and Shell scripting.
• Data Engineering Knowledge: Understanding of Cloud warehouse and Lakehouse concepts, Open Table formats and Search engines for a composable Security Data stack.
• Cloud Infrastructure: Solid experience in one major cloud (AWS/GCP/Azure); Multi‑cloud familiarity is a major plus.
• AI Fluency: Demonstrated experience or strong inclination towards utilising various AI tools to significantly enhance effectiveness (force multiplier) and solve complex business problems, particularly within SecOps and GRC domains.
• Nice to have
• Exposure to Cloud Logging frameworks and best practices for Security Telemetry ingestion.
• Familiarity with container orchestration (Kubernetes/EKS/GKE).
• Interest/experience in building AI‑driven security workflows.
• Knowledge of modern CI/CD patterns and DevOps security integrations.
• Experience with Terraform or other IaC tools.

Join Us in Securing and Accelerating the World's AI Transformation

Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real‑time guardrails, fine‑tuning for accuracy and undoing agentic mistakes.