Senior Security Engineer – SOC/MSSP & Detection Engineering

Symosis Security; India; Remote; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Remote work in India

Independent contractor arrangement

Job summary

Symosis Security is seeking a Senior Security Engineer to join our SOC/MSSP and detection engineering team from India on a remote, contract basis. The role focuses on investigating complex alerts, improving detection coverage, and automating workflows, with 5+ years of cybersecurity experience and hands-on SOC work.

You will work with Microsoft Sentinel/Defender, CrowdStrike, or Rapid7, leverage Python/PowerShell, and collaborate across IT and security teams globally.

Qualifications

• 5+ years of cybersecurity experience with hands-on SOC investigations
• Experience in detection engineering and incident response activities
• Strong scripting in Python or PowerShell, and REST API usage
• Experience writing detection queries (KQL, SPL, or similar)
• Excellent written English and incident documentation
• Ability to drive issues through investigation, remediation, and closure

Responsibilities

• Investigate escalated security alerts and incidents across endpoints, identities, email, cloud, and networks.
• Support incident response, threat hunting, containment recommendations, and root-cause analysis.
• Develop and tune detection rules, improve alert quality, and identify telemetry gaps.
• Maintain SIEM/EDR integrations, troubleshoot ingestion issues, and verify platform health.
• Integrate security tools with ticketing and response workflows via APIs and automation.
• Improve playbooks and investigation documentation; ensure quality of incident closures.
• Work with Python or PowerShell to build practical security automation.
• Participate in shifts or on-call coverage and coordinate with US teams.

Skills

SOC investigations

Detection engineering

Incident response

Python

PowerShell

APIs automation

English documentation

Tools

Microsoft Sentinel

Defender for Endpoint

CrowdStrike

Rapid7

Job description

Senior Security Engineer – SOC/MSSP & Detection Engineering

Full-time contract | Remote, India | ₹18–24 lakh per year

• Schedule: Monday–Friday, 9 AM–6 PM US Eastern Time, following US daylight saving changes.
• Compensation: Annual contract fee of ₹18–24 lakh, paid monthly.
• Time off: 10 working days of paid time off annually.
• Arrangement: Independent contractor engaged directly by Symosis Security LLC, US. No company-sponsored health insurance or employee benefits.

About Symosis Security

Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients strengthen security through managed operations, engineering, assessments, and incident response.

We’re looking for a senior engineer who can investigate complex alerts, improve detection coverage, troubleshoot security platforms, and automate operational workflows.

What you’ll do

• Investigate escalated security alerts and incidents across endpoint, identity, email, cloud, and network environments.
• Support incident response, threat hunting, containment recommendations, and root-cause analysis.
• Develop and tune detection rules, improve alert quality, and identify telemetry gaps.
• Maintain SIEM/EDR integrations, troubleshoot ingestion failures, and validate security platform health.
• Integrate security platforms with ticketing and response workflows through APIs and automation.
• Improve playbooks, investigation documentation, and incident closure quality.
• Use Python, PowerShell, and AI coding tools to build and validate practical security automation.
• Participate in agreed shift or on-call coverage and scheduled overlap with US teams.
• 5+ years of cybersecurity experience, including hands‑on SOC investigations and security platform engineering.
• Experience handling escalations beyond dashboard monitoring and ticket forwarding.
• Strong hands‑on experience with at least one of Microsoft Sentinel/Defender, CrowdStrike, or Rapid7.
• Working knowledge of Windows, Linux, networking, identity attacks, and incident response.
• Experience writing detection queries using KQL, SPL, or another platform query language.
• Practical Python or PowerShell skills and experience working with REST APIs.
• Strong written English and clear investigation documentation.
• Ability to independently drive assigned issues through investigation, remediation coordination, and closure.

Preferred qualifications

• Microsoft Entra ID, Microsoft 365, Azure, and Active Directory security.
• ServiceNow integrations, SOAR workflows, and detection-as-code.
• Fortinet administration, vulnerability management, or network troubleshooting.
• Relevant certifications such as SC-200, AZ-500, CrowdStrike, GIAC, or CISSP.