Senior Security Engineer

Webhosting; Chennai District; On-site; INR 1,500,000 - 3,000,000; Full time

Benefits offered by this job

Medical Insurance stipend

9 Company-Paid Holidays

Sabbatical every 5 years

Anniversary bonus

Professional development reimbursement

Fitness membership reimbursement

Wellable subscription

Job summary

Vultr is expanding its India presence and building its first Global Integrated Operations Command Center (GIOC) in Chennai – the 24×7 nerve center for monitoring, triage, and incident resolution across Vultr’s security operations.

We are seeking Senior Security Engineers to own escalated investigations, lead incident response across SIEM, threat intel, identity/access, and cloud telemetry, and mentor other engineers.

Qualifications

• Graduate/Engineer in a relevant field (B.E./ B.Tech , or equivalent)
• 5-8 years of experience in security operations, incident response, or a SOC
• Deep hands-on expertise with SIEM, EDR, log analysis, and endpoint/network forensics
• Strong understanding of attacker techniques, MITRE ATT&CK framework, threat intelligence, and incident-response lifecycle
• Proven experience leading complex investigations, containment/eradication, and root-cause analysis
• Detection-engineering and automation skills (Python, SOAR playbooks, detection-as-code) and familiarity with ITSM tooling
• Strong written and verbal communication for technical leadership, documentation, and mentoring; rotational 24×7 shift and on-call model
• Proficient in English verbal and written communication

Responsibilities

• Own alerts escalated from Security Engineers across SIEM, identity/access, endpoint, and cloud
• Lead deep analysis using log correlation, endpoint and network forensics, and threat-intelligence enrichment
• Meet response SLA targets and provide regular updates throughout the incident lifecycle
• Determine scope, root cause, and attacker activity; distinguish true positives from anomalies
• Drive containment, eradication, and recovery actions, and implement hardening to close attack path
• Partner with L3 / Engineering SMEs on remediation and with stakeholders on disclosure and compliance obligations
• Preserve forensic evidence and maintain chain-of-custody throughout the investigation
• Act as technical lead on major-incident (Sev-0 / Sev-1) and coordinate across towers
• Document containment and recovery decisions under pressure, balancing risk and availability
• Serve as senior escalation point and security subject-matter expert for the GIOC
• Build and tune detections and correlation rules to improve fidelity
• Conduct proactive threat hunting using hypotheses, threat intel, and the MITRE ATT&CK framework
• Automate triage and response with SOAR playbooks and scripting
• Drive permanent reduction of repeat incidents through detection, hardening, and process change
• Author/runbooks, detection logic, and knowledge-base articles; mentor analysts
• Lead knowledge transfer and shadowing during onboarding and go-live
• Lead post-incident reviews (PIR) and root-cause write-ups with corrective actions

Skills

SIEM

EDR

Log analysis

Forensics

Threat intel

MITRE ATT&CK

Python

SOAR

Incident response

Leadership

Education

Bachelor's degree in IT / CS

Tools

ITSM tooling

SOAR

Job description

Not specified Full-time Senior Infrastructure

Job Description

Vultr Cares

Medical Insurance stipend paid annually

9 Company-Paid Holidays

Generous Leave Policy + 1 month paid sabbatical every 5 years + Anniversary Bonus each year

Professional Development Reimbursement

Fitness membership reimbursement

Company paid Wellable subscription

Join Vultr

Vultr is expanding its India presence and is building its firstGlobal Integrated Operations Command Center (GIOC) in Chennai– the 24×7 nerve center for monitoring, triage, and incident resolution across Vultr’s globalsecurity operations.

We are seekingSenior Security Engineersto own escalated investigations and lead incident response across Vultr’ssecurity surface – SIEM, threat detection, identity and access, and endpoint/cloud telemetry.This is a deep-dive role for experienced security operators who lead investigations, threat hunting, and forensics, drive detection engineering, and mentor Security Engineers – and who want to grow toward incident response, threat-detection, or security engineering leadership. You must be comfortable with a rotational shift and on-call model – including nights, weekends, and holidays – to sustain follow-the-sun coverage.

Role Overview

TheSenior Security Engineerowns alerts escalated from Security Engineer and leads investigation on the most complex security events. You perform deep analysis, drive incidents to resolution withindefined SLAs,determine root cause and scope, contain and eradicate threats, and deliver detections and fixes that prevent recurrence. The role ensuresdeep technical investigation and platform securitythat protects customer data and platform integrity.

You act as a senior escalation point andsecurity subject-matter expert,leading incident-response bridges, partnering with Secops/Engineering SMEs on remediation, and raising the team’s capability through detections, runbooks, and mentoring. Success is measured byMTTR/MTTC, investigation quality, recurrence reduction, and detection coverage.The role runs on arotational shift and on-call scheduleto sustain 24×7 coverage.

Key Responsibilities

Escalated Investigation & Incident Response

Own alerts escalated from Security Engineers across SIEM, identity/access, endpoint, and cloud, and drive investigations to closure

Lead deep analysis using log correlation, endpoint and network forensics, and threat-intelligence enrichment

Meet response SLA targets and provide regular, accurate updates throughout the incident lifecycle

Determine scope, root cause, and attacker activity; distinguish true positives from benign anomalies

Drive containment, eradication, and recovery actions, and implement hardening to close the attack path

Partner with L3 / Engineering SMEs on remediation and with stakeholders on disclosure and compliance obligations

Preserve forensic evidence and maintain chain-of-custody throughout the investigation

Major Incident Response & Technical Leadership

Act as technical lead on major-incident (Sev-0 / Sev-1) and suspected-breach bridges, coordinating across towers

Make and document containment and recovery decisions under pressure, balancing risk and availability

Serve as senior escalation point and security subject-matter expert for the GIOC

Detection Engineering, Threat Hunting & Automation

Build and tune detections and correlation rules to improve fidelity and reduce false positives

Conduct proactive threat hunting using hypotheses, threat intel, and the MITRE ATT&CK framework

Automate triage and response with SOAR playbooks and scripting to reduce manual effort and MTTR/MTTC

Drive permanent reduction of repeat incidents through detection, hardening, and process change

Author and maintain runbooks, detection logic, and knowledge-base articles that raise L1 first-time resolution

Mentor and coach Security analysts; review triage and investigation quality and provide feedback

Lead knowledge transfer and shadowing during onboarding and go-live

Lead post-incident reviews (PIR) and root-cause write-ups with clear corrective actions

Track corrective and preventive actions to closure and measure recurrence

Surface systemic risks and drive trend-based detection and hardening improvements

Qualifications & Experience

Graduate/Engineerin a relevant field (B.E./ B.Tech , or equivalent)

5-8 years of experiencein security operations, incident response, or a SOC, includingSenior Security Engineers escalation and incident-response ownership

Deep hands-on expertise with SIEM, EDR, log analysis, and endpoint/network forensics

Strong understanding of attacker techniques, the MITRE ATT&CK framework, threat intelligence, and the incident-response lifecycle

Proven experience leading complex investigations, containment/eradication, and root-cause analysis

Detection-engineering and automation skills (Python, SOAR playbooks, detection-as-code) and familiarity with ITSM tooling

Strong written and verbal communication for technical leadership, documentation, and mentoring; willingness and ability to work a rotational 24×7 shift and on-call model, including nights, weekends, and holidays

Proficient in English verbal and written communication

Inclusion & Privacy

We are an equal opportunity employer and are committed to creating an inclusive environment for all employees. We welcome applications from individuals of all backgrounds and experiences, and we prohibit discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable laws. Vultr will consider qualified applicants with arrest or conviction records in accordance with applicable laws and will not conduct a background check until after an offer of employment has been extended and accepted.

We also take your privacy seriously. We handle personal information responsibly and follow applicable laws, including U.S. privacy rules and India’s Digital Personal Data Protection Act, 2023. Your data is used only for legitimate business purposes and is protected with proper security measures.

Where allowed by law, applicants may request details about the data we collect, access or delete their information, withdraw consent for its use, and opt out of nonessential communications. For more details, please see our Privacy Policy .