Senior Security Engineer

Assa Abloy Entrance Systems; Chennai District; Hybrid; INR 2,000,000 - 3,200,000; Full time

Job summary

Assa Abloy Entrance Systems in Chennai (Hybrid) seeks a Senior Security Engineer to lead security operations, strengthen posture, and drive vulnerability management and compliance across endpoints, servers, and cloud environments.

You will supervise EDR coverage, investigate incidents, track remediation, and mentor engineers while collaborating with global security teams and auditors. This role demands hands-on expertise and strong communication.

Qualifications

• 8–10 years of progressive cybersecurity or security engineering experience.
• Hands-on expertise with EDR tools and processes.
• Knowledge of vulnerability management and security frameworks (NIST CSF, ISO 27001).
• Proven track record driving compliance and risk reduction.

Responsibilities

• Own recurring security posture and compliance reviews across endpoints, servers, identity, network, cloud, and other in-scope services.
• Administer and govern EDR platforms; monitor deployment coverage, sensor health, policy compliance, detection quality, response actions, and SLAs.
• Manage vulnerability discovery, prioritization, remediation, and closure with asset owners, using exploitability, exposure, and business criticality to focus effort.
• Analyze security telemetry, scan results, incidents, and control evidence; identify gaps and determine root causes for recurring or high-risk findings.
• Recommend remediation roadmaps and compensating controls; establish owners and target dates, elevate blockers, and validate closure.
• Report KPIs and KRIs for EDR coverage, control compliance, critical and aged vulnerabilities, remediation SLAs, recurring findings, and risk-reduction trends.

Skills

Security operations

EDR expertise

Vulnerability management

Security compliance

Incident response

Metrics reporting

Stakeholder communication

On-call support

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

CrowdStrike Falcon

Microsoft Defender for Endpoint

SentinelOne

Job description

Senior Security Engineer

Location: Chennai, India (Hybrid)

Job Summary

The Senior Security Operations Engineer is a hands‑on security leader responsible for strengthening the organizations security posture, operating EDR and vulnerability management capabilities, and driving sustained security compliance. Key areas of focus are:

• Drive enterprise security posture and compliance initiatives, converting control gaps into prioritized, measurable remediation plans.
• Operate and improve EDR capabilities, including agent health and coverage, policies, alert investigation, containment, tuning, exclusions, upgrades, and reporting.
• Lead vulnerability management across asset coverage, risk‑based prioritization, remediation tracking, validation, exceptions, and SLA governance.
• Review dashboards, telemetry, assessments, and compliance results to identify control weaknesses, adverse trends, and systemic risks.

Responsibilities

Duties and responsibilities include and are not limited to the following:

• Own recurring security posture and compliance reviews across endpoints, servers, identity, network, cloud, and other in-scope services.
• Administer and govern EDR platforms; monitor deployment coverage, sensor health, policy compliance, detection quality, response actions, and SLAs.
• Manage vulnerability discovery, prioritization, remediation, and closure with asset owners, using exploitability, exposure, and business criticality to focus effort.
• Analyze security telemetry, scan results, incidents, and control evidence; identify gaps and determine root causes for recurring or high-risk findings.
• Recommend remediation roadmaps and compensating controls; establish owners and target dates, elevate blockers, and validate closure.
• Report KPIs and KRIs for EDR coverage, control compliance, critical and aged vulnerabilities, remediation SLAs, recurring findings, and risk‑reduction trends.
• Support compliance activities through current policies, procedures, evidence, exceptions, and action trackers aligned with internal requirements and security frameworks.
• Lead or support security incident investigation and response, including endpoint triage, containment, recovery coordination, lessons learned, and control improvement.
• Evaluate, implement, integrate, and improve security tools and processes; use automation to increase consistency, visibility, and efficiency.
• Work with stakeholders, auditors, and global security teams; communicate risk and progress clearly, mentor engineers, and participate in on‑call support as required.
• Maintain operational documentation and management updates, contribute to continuous process improvement, and perform other duties as assigned

Qualifications

• 8 to 10 years of progressive experience in cybersecurity, security operations, or security engineering within complex enterprise environments.
• Strong hands‑on experience with EDR tools and processes, such as CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or comparable platforms.
• Strong knowledge of vulnerability management tools and processes, such as Qualys, Tenable, Rapid7, or comparable platforms, across the remediation lifecycle.
• Proven experience driving organization‑wide security compliance or security posture improvement initiatives and tracking actions to completion.
• Demonstrated ability to assess security controls, identify gaps and root causes, evaluate risk, and provide practical improvement recommendations.
• Working knowledge of security frameworks and standards, including NIST CSF, CIS Controls, ISO 27001, or similar frameworks.
• Strong knowledge of Windows and Linux endpoints, networking, Active Directory and identity security, and common cloud security concepts.
• Experience with SIEM analysis, threat investigation, and active incident response.
• Ability to develop meaningful metrics, prioritize work by risk and business impact, and communicate effectively with engineers and senior stakeholders.
• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.