Senior Security Engineer

SourcingXPress; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Arcesium is seeking a Security Operations professional to manage and enhance the monitoring of endpoints, network, and cloud environments. You will triage, investigate, and respond to security incidents in a fast-paced SOC, while collaborating with security teams to refine detection rules and procedures.

You will gain deep exposure to SIEM, EDR, and firewall technologies and contribute to ongoing security control improvements. Strong communication and analytical skills are essential for success.

Qualifications

• Minimum 3–5 years in security engineering or security operations.
• Bachelor's/Master's in CS/Information Security or related field.
• Hands-on SOC experience with monitoring across endpoints, network, and cloud.

Responsibilities

• Manage day-to-day SOC operations, triaging, investigating, and resolving security incidents across endpoints, network, and cloud environments.
• Collaborate with cross-functional security teams to develop and refine monitoring policies, detection rules, and response procedures.
• Develop and maintain an understanding of the organization's infrastructure, applications, and security controls.
• Ensure security incidents are documented, tracked, and reported promptly.
• Manage relationships with external vendors and service providers supporting SOC operations.

Skills

SOC operations

Security monitoring

Incident response

Phishing analysis

EDR

SIEM

Python scripting

Excellent communication

Problem solving

Cross-functional collaboration

Education

B.E./B.Tech or M.Tech/M.S. in CS/Info Sec

Tools

EDR

Zscaler (ZPA/ZIA/ZDX)

Palo Alto firewalls

SIEM

Job description

Job Description

The Information Security team at Arcesium is a global team responsible for managing the overall cyber security risk posture of the company.

Company

Company: Arcesium

Website: Visit Website

LinkedIn: Visit LinkedIn

Business Type: Enterprise

Company Type: Product

Business Model: B2B

Funding Stage: Series D+

Industry: FinTech

The current role is for the Security Operations and Monitoring team within the Information Security umbrella. The team is responsible for ongoing monitoring, analyzing, and responding to the security alerts in the organization.

The team's primary objective is to detect and respond to security alerts or potential security incidents, in a timely and effective manner.

The team ensures the security of an organization's assets, systems, and data by leveraging a variety of tools and technologies, including security information and event management (SIEM) systems, EDR, Firewall, DLP, and other security tools to monitor & analyze network traffic & system logs, identify suspicious activity and respond to various security alerts.

The person in this role should not just be doing Security Monitoring tasks, they will be involved in Security Monitoring related engineering tasks as well.

What You'll Do

• Manage day-to-day SOC operations, including triaging, investigating, and resolving security incidents across endpoints, network, and cloud environments.
• Collaborate with cross-functional security teams to develop and refine security monitoring policies, detection rules, and response procedures.
• Develop and maintain a comprehensive understanding of the organization's infrastructure, applications, and security controls.
• Ensure security incidents are thoroughly documented, tracked, and reported in a timely manner.
• Manage relationships with external vendors and service providers that support SOC operations.

What You'll Need

• 3–5 years of overall experience, with at least 2 years in a security engineering or security operations role.
• B.E./B.Tech or M.Tech/M.S. in Computer Science, Information Security, or a related field.
• Hands‑on experience in a Security Operations Center (SOC), with a focus on security monitoring across EDR, Zscaler (ZPA/ZIA/ZDX), Palo Alto firewalls, and related technologies.
• Strong understanding of EDR and WAF solutions, including detection tuning and alert triage.
• Good understanding of managing and fine‑tuning DLP policies across endpoint and network channels.
• Experience analyzing and triaging phishing emails, including header analysis and indicator extraction.
• Good understanding of implementing and managing SIEM solutions, including log ingestion, correlation rules, and dashboard development.
• Solid knowledge of network protocols, infrastructure, and common attack patterns.
• Basic proficiency in Python scripting or automation for security workflows.
• Excellent analytical and problem‑solving skills.
• Ability to communicate complex technical issues clearly to non-technical stakeholders.
• Strong interpersonal, written, and verbal communication skills.