Sr Advanced Cyber Security Architect/Engineer

Resideo; Bengaluru; Hybrid; INR 1,500,000 - 2,500,000; Full time

Benefits offered by this job

Advanced training

Opportunities for conferences

Professional development

Job summary

Resideo is looking for a Senior Cyber Security Engineer in Bengaluru to oversee and enhance our Security Operations capabilities. This senior role involves leading complex investigations, developing cybersecurity policies, and driving SOC maturity.

The ideal candidate will possess expertise in SOC technologies, excellent communication skills, and at least 8 years of experience in cybersecurity. This hybrid position also supports global SOC operations and offers opportunities for advanced training and professional growth.

Qualifications

• Minimum 8+ years of cybersecurity or SOC experience.
• Excellent documentation and communication skills.
• Certifications: GSEC, Security+, CISSP (preferred or in progress).
• Deep understanding of network protocols, IDS/IPS, SIEM, firewalls, proxies, and DLP technologies.
• Strong understanding of incident response frameworks and advanced threat actor behaviors.

Responsibilities

• Continuously assess emerging threats for SOC tools and workflows improvement.
• Lead identification, investigation, and remediation of advanced security events.
• Develop cybersecurity policies and DLP standards aligned with organizational risk posture.
• Collaborate with architecture, network, and legal during investigations.

Skills

Cybersecurity expertise

Communication skills

Incident response

Threat investigation

Documenting policies

Education

Certifications: GSEC, Security+, CISSP

8+ years in cybersecurity/SOC

Tools

SIEM

SOAR

XDR

DLP technologies

Job description

Job Summary

The Senior Cyber Security Engineer is a senior technical leader within the Security Operations function, responsible for advanced analytics, complex investigations, tool engineering, and driving SOC capability maturity. This role proactively identifies and responds to sophisticated threats, advances detection capabilities, and guides the SOC toward higher automation, intelligence‑driven operations, and continuous improvement aligned with industry best practices and Gartner L4 maturity.

Job Duties

• Continuously assess emerging threats and evaluate SOC tools, architectures, and workflows for improvement.
• Recommend and implement standardized, scalable approaches for SOC technologies and processes.
• Develop and enhance SLAs, KPIs, and operational reporting for security tooling and SOC effectiveness.
• Maintain and enhance SOC policies, documentation, and procedures.
• Lead identification, investigation, and remediation of advanced security events and incidents.
• Ensure audit trails and evidence-handling standards support incident investigation and regulatory requirements.
• Develop cybersecurity policies and DLP standards aligned with organizational risk posture.
• Manage and investigate data‑loss events to ensure risks are mitigated.
• Execute and enforce security policy, exception management, and risk controls.
• Provide Tier 3 technical escalation support for SOC incidents and engineering issues.
• Collaborate closely with architecture, network, data center, HR, Legal, and third parties during investigations.
• Lead and contribute to complex cybersecurity and SOC modernization projects.
• Mentor and develop SOC engineers and analysts to strengthen capabilities.
• Provide leadership input into planning, deployment, and optimization of new and existing security initiatives.
• Lead SIEM, SOAR, and XDR engineering, correlation rule development, and detection content optimization.
• Drive automation design and orchestration to increase SOC efficiency and reduce response times.
• Lead deep‑dive threat hunting, hypothesis‑driven investigations, and adversary simulation.
• Guide cloud‑native security monitoring and detection engineering.

Required Qualifications

• Minimum 8+ years of cybersecurity or SOC experience.
• Excellent documentation and communication skills.
• Certifications: GSEC, Security+, CISSP (preferred or in progress).
• Deep understanding of network protocols, IDS/IPS, SIEM, firewalls, proxies, and DLP technologies.
• Strong understanding of incident response frameworks and advanced threat actor behaviors.
• Ability to prioritize in a dynamic, fast‑paced environment.

Preferred Qualifications

• Experience with modern SOC engineering (SOAR automation, XDR implementation, cloud monitoring).
• Strong experience developing detection rules, tuning alerts, and engineering log ingestion pipelines.
• Proven ability to lead investigations involving advanced persistent threats (APTs).
• Additional certifications (GCIA, GCFE, GDAT, GCTI, etc.).

Benefits and Growth

• Support global SOC operations.
• Opportunities for advanced training, conferences, and continuous professional development.
• Reports to: Cyber Security Director.

Work Arrangement

Hybrid (role is hybrid).

Equal Employment Opportunity Statement

Resideo is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, aff­ectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status. For more information on applicable U.S. equal employment regulations, refer to the "EEO is the Law" poster, "EEO is the Law" Supplement Poster and the Pay Transparency Nondiscrimination Provision. Resideo complies with applicable equal employment laws in all countries where we do business. For more information on how we process your information in the job application process, please refer to Recruitment Privacy Notice. If you require a reasonable accommodation to apply for a job, please use Contact Us form for assistance.