Senior Security Engineer

Socnet Technologies Private Limited; India; À distance; INR 4 200 000 - 6 600 000; Plein temps

Résumé du poste

Socnet Technologies Private Limited is seeking a Senior Security Engineer to design and build scalable security automation across SIEM, SOAR, EDR, and threat intel platforms. The role centers on automating SOC workflows, incident response, and threat investigation with AI-driven capabilities.

You will develop reusable components and integrations, translating customer use cases into production-grade content while ensuring reliability and performance in diverse environments.

Qualifications

• Demonstrated experience in security engineering, automation, or related field.
• Strong hands-on programming in Python or Java for automation tasks.
• Experience building SOC playbooks, automations, and integrations.
• Solid understanding of SIEM/SOAR/EDR and threat intel tooling.
• Ability to turn customer needs into production-grade automation.
• Knowledge of AI/LLM concepts and their security applications.

Responsabilités

• Design, develop, and maintain reusable security automation components and playbooks.
• Build scalable SOC workflows, incident response, and alert enrichment.
• Translate customer use cases into production-ready automation content.
• Create integrations across SIEM, SOAR, EDR, and threat intel platforms.
• Explore AI-driven workflows and validate secure, reliable automation.

Connaissances

Python Programming

SOAR

Playbook Development

Cybersecurity Fundamentals

Problem-Solving

Software Engineering

Description du poste

This role is for one of our clients

Min Experience: 7+ years

Location: Remote (India)

JobType: full-time

We are looking for a Senior Security Engineer with strong expertise in security automation, cybersecurity engineering, and AI-driven workflows. The ideal candidate will design, develop, and maintain scalable security automation solutions that streamline Security Operations Center (SOC) workflows, improve incident response, and enhance operational efficiency.

In this role, you will build reusable security automation components, integrations, connectors, and playbooks that work across security platforms, including SIEM, SOAR, EDR, vulnerability management, and threat intelligence solutions. You will also explore the integration of Artificial Intelligence (AI) and Large Language Models (LLMs) into security automation to enable intelligent decision-making and more effective security operations.

The role requires strong programming skills, a solid understanding of the cybersecurity ecosystem, and the ability to transform customer use cases and proof-of-concepts into reliable, production-grade solutions.

Requirements

Key Responsibilities

1. Security Automation Development

• Design, develop, and maintain reusable security automation components, connectors, integrations, and playbooks.
• Build scalable automation solutions to streamline SOC workflows, incident response, threat investigation, and other security operations.
• Translate customer requirements, real-world use cases, and proof-of-concepts into production-ready security automation content.
• Develop modular, reliable, and maintainable automation frameworks that can be deployed across diverse customer environments.
• Optimise automation workflows for performance, scalability, reliability, and ease of deployment.

2. Security Platform Integration

• Build integrations with SIEM, SOAR, Endpoint Detection and Response (EDR), vulnerability management, and threat intelligence platforms.
• Develop connectors that enable seamless communication and data exchange between security tools.
• Automate repetitive security tasks, alert enrichment, incident triage, investigation, and response workflows.
• Ensure integrations are robust, efficient, and compatible with different security environments.
• Troubleshoot integration issues and continuously improve the reliability of automation components.

3. AI and LLM-Powered Security Automation

• Integrate AI and LLM capabilities into security automation workflows to support intelligent analysis and decision-making.
• Explore agentic workflows, AI-powered investigation, and automated response capabilities for security operations.
• Develop automation frameworks that combine traditional rule-based workflows with AI-driven reasoning where appropriate.
• Evaluate AI-enabled approaches for improving alert analysis, threat investigation, and operational efficiency.
• Apply suitable validation and safeguards to ensure AI-powered workflows are reliable and secure.

4. Production Engineering and Content Management

• Maintain and continuously enhance the security automation content library used by customers globally.
• Apply software engineering best practices, including code reviews, testing, documentation, version control, and performance optimisation.
• Ensure automation components are reusable, scalable, maintainable, and production-ready.
• Identify opportunities to improve deployment speed, operational consistency, and the overall usability of security solutions.
• Diagnose technical issues and implement long-term solutions to prevent recurring problems.

5. Cross-Functional Collaboration

• Collaborate with Sales Engineering, Professional Services, and Product teams to understand customer requirements and improve solution delivery.
• Support technical proof-of-concepts and help convert customer-specific requirements into reusable automation capabilities.
• Work with stakeholders to troubleshoot deployment challenges and enhance the customer experience.
• Incorporate customer feedback into automation development and product improvements.
• Contribute technical insights and recommendations to strengthen security automation capabilities.

Must-Have Skills

• Python Programming: Strong programming skills in Python for developing automation components, integrations, and security workflows.
• SOAR: Practical understanding of Security Orchestration, Automation, and Response platforms, including the development and implementation of automation workflows.
• Playbook Development: Experience designing and building security playbooks for incident response, investigation, alert triage, and operational automation.
• Cybersecurity Fundamentals: Understanding of security operations, threat detection, incident response, and security tooling.
• Problem-Solving: Strong analytical skills and the ability to design efficient, scalable solutions for complex security challenges.
• Software Engineering: Understanding of algorithms, data structures, testing, maintainable code, and performance optimisation.

Good-to-Have Skills

• SIEM: Experience with Security Information and Event Management platforms, security event analysis, alert management, and detection workflows.
• Experience integrating EDR, vulnerability management, and threat intelligence platforms.
• Familiarity with SOC operations, incident response, and threat engineering.
• Knowledge of Java for automation and integration development.
• Understanding of Generative AI, LLMs, agentic workflows, and AI-powered automation frameworks.
• Experience developing reusable security content for multiple customer environments.
• Familiarity with REST APIs, webhooks, authentication mechanisms, and third-party integrations.

Required Qualifications and Experience

• Demonstrated experience in security engineering, security automation, cybersecurity software development, or a related technical field.
• Strong hands-on programming experience in Python or Java .
• Experience developing security automation solutions, integrations, or SOC playbooks.
• Practical understanding of security platforms such as SIEM, SOAR, EDR, vulnerability management, and threat intelligence tools.
• Ability to transform customer requirements and technical concepts into production-grade automation solutions.
• Understanding of AI/LLM concepts and their application to security workflows.
• Strong ownership, troubleshooting, and collaboration skills.
• Ability to work effectively in a fast-paced, product-focused engineering environment.