Senior SOC Engineer

Keka Technologies Private Limited; Bengaluru; On-site; INR 1,500,000 - 3,200,000; Full time

Job summary

BLR - First Answer India Services Private Limited seeks a Senior Security Operations Engineer to join the security team. You will be hands-on with incident response, detection engineering, threat intelligence, threat hunting, and security automation to build a capable security operation for digital asset infrastructure.

The role requires 5–7 years in security operations and strong experience with SIEM and cloud security, including AWS.

Qualifications

• 5–7 years of experience in Security Operations, Detection Engineering, Incident Response, Threat Hunting, or Security Engineering.
• Strong hands-on experience with SIEM, security monitoring, and log analysis.
• Experience with Elastic/Elasticsearch/Kibana and Datadog.
• Strong understanding of Incident Response and MITRE ATT&CK.
• Experience building and tuning security detections.

Responsibilities

• Investigate and respond to security incidents across cloud, applications, infrastructure, and blockchain environments.
• Design, develop, and continuously improve security detections and monitoring use cases.
• Build and tune detections using Elastic and Datadog.
• Conduct proactive threat hunting based on threat intelligence and attacker TTPs.
• Translate threat intelligence into actionable detections, IOCs, and response capabilities.
• Improve security visibility and telemetry across our AWS and blockchain infrastructure.
• Develop automation for alert enrichment, investigation, and incident response.
• Perform root‑cause analysis and drive remediation following security incidents.
• Work closely with Engineering, DevOps, Platform, and Security teams to strengthen our overall security posture.

Skills

SIEM

Threat Hunting

Incident Response

Elastic Stack

Datadog

AWS Security

Python

Bash

MITRE ATT&CK

Networking

Tools

Elastic Stack

Datadog

Job description

BLR - First Answer India Services Private Limited

Full-Time

About the Role: Liminal Custody is looking for a Senior Security Operations Engineer to join our security team and help protect critical cloud, application, and blockchain infrastructure. This isn't a traditional SOC role. You will be hands‑on with incident response, detection engineering, threat intelligence, threat hunting, and security automation —helping us build a security operation capable of detecting and responding to sophisticated attacks against digital asset infrastructure.

Responsibilities:

• Investigate and respond to security incidents across cloud, applications, infrastructure, and blockchain environments.
• Design, develop, and continuously improve security detections and monitoring use cases.
• Build and tune detections using Elastic and Datadog.
• Conduct proactive threat hunting based on threat intelligence and attacker TTPs.
• Translate threat intelligence into actionable detections, IOCs, and response capabilities.
• Improve security visibility and telemetry across our AWS and blockchain infrastructure.
• Develop automation for alert enrichment, investigation, and incident response.
• Perform root‑cause analysis and drive remediation following security incidents.
• Work closely with Engineering, DevOps, Platform, and Security teams to strengthen our overall security posture.

Desired Candidate Profile:

• 5–7 years of experience in Security Operations, Detection Engineering, Incident Response, Threat Hunting, or Security Engineering.
• Strong hands‑on experience with SIEM, security monitoring, and log analysis.
• Experience with Elastic / Elasticsearch / Kibana and Datadog.
• Strong understanding of Incident Response and MITRE ATT&CK.
• Experience building and tuning security detections.
• Good understanding of AWS, Linux, networking, and cloud security.
• Strong scripting/automation skills in Python, Bash, or similar.
• Strong analytical and investigative mindset with the ability to independently handle security incidents

Good to Have:

• Experience with Web3, blockchain, cryptocurrency, or digital asset security.
• Experience with AWS security services such as CloudTrail, GuardDuty, Security Hub, and VPC Flow Logs.
• Experience with threat hunting, SOAR, EDR/XDR, Sigma, YARA, or Suricata.
• Security certifications such as GCIH, GCIA, GCFA, Security+, CySA+, or equivalent.

About Liminal:

Liminal Custody is a digital asset management infrastructure platform, offering secure wallet infrastructure and custody-technology solutions for institutions across the digital asset spectrum. This allows organizations to enforce complex transaction policies, and automate their treasury operations, all while maintaining direct control over their assets.Founded in 2021, Liminal is certified with SOC 2 Type II, ISO 27001 & 27701 standards. Headquartered in Singapore, with offices across India, UAE, and Taiwan, Liminal serves clients across the APAC and MENA regions, helping them scale and manage digital asset operations securely and in compliance with regulatory standards.