Senior Security Engineer II - Confluent

IBM Computing; Bengaluru; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

IBM Software in Bengaluru, India seeks an experienced security engineer to join our infrastructure security engineering team with a focus on detection and response. You will help build foundational systems to keep our infrastructure secure against threats and work closely with engineering, IT, and compliance teams.

You will develop and maintain scalable security telemetry pipelines, craft detection strategies, and triage incidents to closure, while continually improving detection rules and

Qualifications

• 8+ years of relevant industry experience.
• Strong domain knowledge in security incident detection and response.
• Hands-on experience instrumenting telemetry solutions to ensure visibility in large-scale deployments.

Responsibilities

• Collaborate with engineering teams to build pipelines for security telemetry.
• Build and maintain scalable security monitoring infrastructure.
• Develop detection strategies to identify anomalous activity and ensure safe operation of critical infrastructure.
• Triage alerts and drive security incidents to closure while reducing impact to the business.
• Build processes to triage security alerts and respond to real incidents.
• Research new threat attack vectors to align detection and response with current threat landscape.
• Proactively improve the quality of detection rules by working with engineering teams.
• Contribute to strategy, risk management and prioritization for detection and response efforts.

Skills

Security incident detection

Incident response

Telemetry pipelines

Scripting

Cloud deployments

Tools

SIEM tools

Job description

Introduction

At IBM Software, we transform client challenges into solutions. Building the world’s leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You’ll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM’s product and technology landscape. Here, you’ll have the tools and opportunities to advance your career while creating software that changes the world.

Your role and responsibilities

We are looking for an experienced security engineer to join our infrastructure security engineering team with a strong focus on detection and response. You will have a unique opportunity to leverage your threat detection and response experience and build some of the foundational systems and services to keep our infrastructure free from malicious actors and threats.

You will partner closely with all engineering teams, IT administrators, and compliance analysts to ensure that we maintain sufficient visibility into our environments and develop effective programs and practices to ensure that our environments are always secure. Tooling and automation will be key to success as we scale our environments to meet customer demand.

We intend to be the world's best, fastest, and most complete stream processing service built by an excellent team, all while having fun - come join us on the journey!

What You Will Do:

• Collaborate with engineering teams for building and setting up pipelines needed to gather relevant security telemetry.
• Build and maintain an effective and scalable security monitoring infrastructure solution.
• Develop detection strategies to identify anomalous activity and ensure that our critical infrastructure and services operate in a safe environment.
• Triage alerts and drive security incidents to closure while reducing its potential impact to Confluent.
• Build processes and workflows to triage security alerts and respond to real incidents.
• Research new threat attack vectors and ensure that our detection and response capability is in line with the current threat landscape.
• Proactively improve the quality of our detection rules and strive to eliminate classes of issues by working directly with engineering teams.
• Contribute to strategy, risk management and prioritization for all efforts around detection and response.

Required technical and professional expertise

• 8+ years of relevant industry experience.
• Strong domain knowledge in security incident detection and response.
• Hands‑on experience in instrumenting and deploying telemetry solutions to ensure visibility in large‑scale, heterogeneous deployments.
• Demonstrated experience with effective incident response and containment practices, preferably in a cloud‑first environment.
• Experience with operating open‑source and/or commercial solutions for logging and security event management.
• Decision‑maker with the ability to operate with freedom and autonomy.
• Experience working with distributed teams and other cross‑functional stakeholders.
• Ability to manage competing priorities and workload.
• Ability to script or code fluently in an interpreted language.
• Experience with serverless deployments in AWS, GCP, or Azure is a plus.

IBM is committed to creating a diverse environment and is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.