Senior Security Operations Engineer

Pure Storage India Pvt Ltd; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Flexible time off

Wellness resources

Company-sponsored team events

Job summary

Pure Storage in Bengaluru, India, seeks a Senior Staff Security Operations Engineer to own and mature Attack Surface Management, Vulnerability Management, Zero Trust, and security automation across engineering and cloud environments.

You will lead hands-on security operations, define SLAs/KPIs, establish governance, and drive risk reduction through automation and collaboration with global security teams. 8+ years of cybersecurity experience required.

Qualifications

• 8+ years of cybersecurity experience, including Security Operations, Attack Surface Management, Vulnerability Management, or Security Engineering.
• Proven experience building or maturing enterprise Vulnerability/Attack Surface Management programs.
• Strong understanding of asset discovery, vulnerability lifecycle, risk-based prioritization, remediation governance, and exposure management.
• Hands-on with tools like Tenable, Qualys, Wiz, Prisma Cloud, Zscaler, CrowdStrike, Splunk, or equivalent.
• Experience with security automation, REST APIs, scripting, and SOAR, guiding engineers to scalable solutions.
• Broad security fundamentals across networking, cloud, endpoints, identity, Zero Trust, detection, and incident response.
• Ability to define KPIs, SLAs, processes, and metrics to drive improvements.
• Strong stakeholder management to influence engineering and leadership and drive remediation.

Responsibilities

• Lead and mature enterprise Attack Surface and Vulnerability Management across cloud, infrastructure, endpoints, apps, and internet-facing environments.
• Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, threat intel, and compensating controls.
• Establish remediation SLAs, KPIs/KRIs, dashboards, and governance to measure risk reduction.
• Identify systemic security gaps and develop scalable technical/operational solutions.
• Provide technical leadership across Zscaler/Zero Trust, secrets security, SIEM/detection engineering, EDR, cloud security, and security automation.
• Drive automation and integrations using APIs, scripting, and SOAR to reduce manual effort.
• Partner with Engineering, Product Security, Cloud, Network, Infrastructure, and business leaders to drive remediation of exposures.
• Translate complex security risks into clear recommendations for engineering teams and leadership.

Skills

Attack Surface Management

Vulnerability Management

Zero Trust

Security Automation

REST APIs / Scripting

SOAR

Stakeholder Management

Cloud Security

Tools

Tenable

Qualys

Zscaler

CrowdStrike

Splunk

Prisma Cloud

Job description

Staff Security Operations Engineer Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us.

THE ROLE

As a Staff Security Operations Engineer , you will own and continuously mature capabilities across Attack Surface Management, Vulnerability Management, Zero Trust, Secrets and Credential Security, Detection Engineering, and Security Automation . This is a hands‑on role requiring strong security engineering expertise combined with the ability to build teams, establish operating processes, measure outcomes, and drive remediation across Engineering, Cloud, Infrastructure, and Product organizations. You will partner closely with GISO leadership and global security teams to translate security strategy into measurable execution and risk reduction.

WHAT YOU’LL DO

Lead and mature enterprise Attack Surface and Vulnerability Management capabilities across cloud, infrastructure, endpoints, applications, and internet‑facing environments.

Drive risk‑based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls.

Establish operating processes, remediation SLAs, KPIs/KRIs, dashboards, and governance to measure and drive security risk reduction.

Identify systemic security gaps and develop scalable technical and operational solutions.

Provide technical leadership across Zscaler/Zero Trust, secrets and credential security, SIEM/detection engineering, EDR, cloud security, and security automation.

Drive automation and integrations using APIs, scripting, and SOAR to reduce manual effort and improve operational efficiency.

Partner with Engineering, Product Security, Cloud, Network, Infrastructure, and business leaders to establish ownership and drive remediation of security exposures.

Translate complex security risks and technical findings into clear recommendations for engineering teams and senior leadership.

WHAT YOU BRING

8+ years of cybersecurity experience, including significant experience in Security Operations, Attack Surface Management, Vulnerability Management, or Security Engineering.

Proven experience building, operating, or significantly improving an enterprise Vulnerability Management or Attack Surface Management program.

Strong understanding of asset discovery, vulnerability lifecycle, risk‑based prioritization, remediation governance, and exposure management.

Hands‑on technical experience with platforms such as Tenable, Qualys, Wiz, Prisma Cloud, Zscaler, CrowdStrike, Splunk, or comparable technologies.

Experience with security automation, REST APIs, scripting, and SOAR, with the ability to guide engineers in building scalable solutions.

Strong security fundamentals across networking, cloud, endpoints, identity, Zero Trust, detection, and incident response.

Demonstrated ability to define KPIs, SLAs, operational processes, and security metrics and use them to drive measurable improvements.

Strong stakeholder management skills with demonstrated ability to influence engineering and business leaders and drive remediation without direct authority.

Ability to communicate technical security risk clearly to both engineering teams and senior leadership.

Experience in one or more of the following is highly valued: Zscaler ZIA/ZPA/ ZDeception/ Zero Trust Vulnerability Discovery, Reporting and Management - Tenable, Qualys,Rapid7 or similar Secrets Discovery & Credential/Password Security – GitGuardian, Gitleaks, TruffleHog, or similar SIEM / Detection Engineering – Splunk or similar Threat Hunting & Incident Response CrowdStrike / EDR/XDR Security Automation / SOAR - Splunk, Tines, Torq or similar Cloud Security – AWS, Azure, or GCP Network Security Product Security / DevSecOps / CI/CD Security External Attack Surface Management (EASM) Relevant certifications such as CISSP, CISM, GIAC, Cloud security, or Zscaler Certifications are beneficial, but strong hands‑on engineering experience and demonstrated technical problem‑solving skills are valued most.

We are primarily an in‑office environment and therefore, you will be expected to work from the Bangalore office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave. #LI-ONSITE

WHAT YOU CAN EXPECT FROM US:

Innovation : We celebrate those who think critically, like a challenge, and aspire to be trailblazers.

Growth : We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®!

Team : We build each other up and set aside ego for the greater good.

And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events. Check out purebenefits.com for more information.

ACCOMMODATIONS AND ACCESSIBILITY:

Candidates with disabilities may request accommodations for all aspects of our hiring process. For more on this, contact us at [e-mail] if you’re invited to an interview.

OUR COMMITMENT TO A STRONG AND INCLUSIVE TEAM:

We’re forging a future where everyone finds their rightful place and where every voice matters. Where uniqueness isn’t just accepted but embraced. That’s why we are committed to fostering the growth and development of every person, cultivating a sense of community through our Employee Resource Groups and advocating for inclusive leadership.

Everpure is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire.

Experience Level

Senior Level