Senior Security Engineer - 67167598002

Mployee.me; Dadri; Presencial; INR 2.323.000 - 2.745.000; Jornada completa

Descripción de la vacante

Mployee.me is seeking a Senior Security Engineer to own the security program across multiple business lines. You will lead policy, risk, and compliance efforts, including SOC 2 Type II readiness and audits, while coordinating with clients and internal security teams.

You will execute detection, response, and offensive security activities using CrowdStrike Falcon and other tools, mentor staff, and drive risk remediation across IT and business units.

Formación

• Minimum 9+ years in information security with 4+ years in security operations or incident response (MSP/hosting preferred).
• Strong defensive skills: EDR, log analysis, threat hunting, and incident handling in Windows/AD.
• Hands-on offensive skills: vulnerability scanning, penetration testing, and AD attack paths.
• Knowledge of CIS hardening, firewall policy, M365 security controls, and SOC 2/FTC Safeguards Rule.
• Ability to explain risk to leadership, write security docs, and drive remediation across teams.
• Excellent English, able to work night shift from Noida with US clients.

Responsabilidades

• Own the security program, policies, risk register, and roadmap, reporting top risks to leadership.
• Lead SOC 2 Type II readiness, IRS 4557, FTC Safeguards, and WISP evidence and audits.
• Respond to security questionnaires and audits; manage vendor risk and security escalation for clients.
• Oversee detection and response with CrowdStrike Falcon; coordinate with MDR teams; conduct RCA.
• Define hardening baselines, review Palo Alto policies, MFA coverage, and run staff training.

Conocimientos

EDR

Log analysis

Threat hunting

Incident handling

Offensive security

Penetration testing

Active Directory security

Firewall policy

M365 security controls

Security documentation

English fluency

Night shift availability

Educación

OSCP

CISSP

GIAC certifications

Herramientas

CrowdStrike Falcon

Palo Alto firewalls

Duo

Veeam

Microsoft Defender for Office 365

Descripción del empleo

Position : Senior Security Engineer

Work Hours (Client) : Full-time (Monday to Friday)

Pay Range : $ 2,200 to $ 2,600 / month (varies based on skill set and experience level)

Location of Search : Noida, India

Work Location : In Office

Company Overview

Our client is a managed IT and cloud hosting provider built exclusively for tax and accounting firms in America.

Role Overview

Our client is hiring a Senior Security Engineer to serve as its in-house Subject Matter Expert (SME) for security across their various businesses. As the hosted environment and managed services grow, security needs one owner who covers defense, offensive testing, hardening, audits, and documentation end-to-end. This is a hands-on specialist role that works with the Manager - IT, the infrastructure and identity SMEs, and the Support teams, and serves as the top escalation point for security issues in both lines of business. AI tools are part of the daily toolkit, and the incumbent selects the right tools for security work and guides others in using them safely.

Duties And Responsibilities

Security Program & Compliance

• Own the security program, including policies, standards, the risk register, and the security roadmap, and present status and top risks to leadership.
• Own compliance readiness for SOC 2 Type II, IRS Publication 4557, the FTC Safeguards Rule, and the Company’s Written Information Security Plan (WISP), including evidence and audit support.
• Respond to client security questionnaires and audits, review vendor security risk, and serve as the security escalation point for compliance clients.

Detection & Incident Response

• Own detection and response on CrowdStrike Falcon, including policy tuning, threat hunting, and log analysis in Falcon LogScale, and coordinate with managed detection and response (MDR) providers where they are used.
• Lead security incidents, including malware, ransomware, and business email compromise (BEC), from containment through recovery, and deliver Root Cause Analysis (RCA) reports.
• Maintain the incident response plan and playbooks, and run tabletop exercises with the technical teams.

Offensive Security & Vulnerability Management

• Perform in-house vulnerability scans, internal penetration tests, Active Directory attack-path assessments, and phishing simulations, and prepare the scope for external penetration testing after internal audits are complete.
• Run the vulnerability management program, ranking findings by risk and tracking remediation with system owners to agreed timelines.

Hardening, Network Security & Enablement

• Define hardening baselines aligned with Center for Internet Security (CIS) benchmarks for servers, domain controllers, hypervisor hosts, the golden VM image, and Microsoft 365 tenants.
• Own Palo Alto firewall security policy, including rule reviews, client segmentation, VPN security, and the per-client rollout of licensed threat prevention modules.
• Review privileged access, multi-factor authentication (MFA) coverage, and backup protection against ransomware with the identity and backup owners.
• Build security documentation and staff awareness training, and mentor engineers on secure practices.

Role Modeling & Culture

• Technical mentoring: acting as the team's technical reference and mentoring agents on complex cases through shadowing, troubleshooting together and debriefs after a case is resolved.

Key Performance Metrics

• Detection & Response: Mean time to detect and contain incidents, and share of incidents closed with a completed RCA.
• Vulnerability Management: Critical and high findings fixed within agreed timelines, and open findings over time.
• Hardening & Audit: Share of systems meeting approved baselines, and audit findings closed on time.

Minimum Qualifications

• A minimum of 9 years of hands-on information security experience, with 7 years of relevant experience, including at least 4 years in security operations or incident response at a managed service provider (MSP), hosting provider, or regulated business.
• Strong defensive skills, including Endpoint Detection and Response (EDR), log analysis, threat hunting, and incident handling in Windows and Active Directory environments.
• Hands-on offensive skills, including vulnerability scanning, penetration testing methods, and Active Directory attack paths.
• Working knowledge of firewall policy and segmentation, CIS-based hardening, Microsoft 365 security controls, and frameworks such as SOC 2 and the FTC Safeguards Rule.
• Demonstrated ability to explain risk to leadership and clients, write clear security documentation, and drive remediation across teams.
• Full professional fluency in written and spoken English, as the primary working language with United States-based clients.
• Availability to work a full night shift from the Noida office, covering United States business hours.
• Ability to operate independently with minimal day-to-day oversight and to take responsibility for significant security risks.
• 6. Preferred Qualifications
• Experience with CrowdStrike Falcon, Palo Alto Networks firewalls, Duo, Veeam, and Microsoft Defender for Office 365.
• Certifications such as OSCP, CISSP, or GIAC incident handling credentials.
• Experience in MSP, cloud hosting, or accounting and tax technology environments.
• Scripting in PowerShell or Python for security automation, and familiarity with AI tools such as Claude.