Sr Engineer - GISOCC IS Technology

Valeo; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Valeo in Chennai requires an experienced cybersecurity professional to join the Security Operations Center. You will perform incident response, threat hunting, and vulnerability management, handling Windows and Linux environments, SIEM, DLP, and automation tasks to strengthen security posture.

The role demands 5-7 years of cybersecurity experience, a Bachelor’s degree in IT, strong English communication, and the ability to work independently or in a team with on-call readiness.

Qualifications

• 5-7 years of Cybersecurity Experience
• Graduation in IT with no arrears
• Experience in SOC Operations, EDR, and threat hunting
• Experience with DLP incidents and log monitoring
• Experience with incident response lifecycle (triage, containment, eradication)
• Experience with ServiceNow or JIRA ticketing tools

Responsibilities

• Guaranties confidentiality of information
• Ability to work independently and in a team
• Follow process and documentation
• Good problem solving abilities and analytical skills
• High inclination in reading and understanding technical documentation
• Good Written and oral skills in English
• High degree of commitment and diligence
• Willingness to work 24x7 shifts

Skills

Ownership

Independent work

Team collaboration

On-call readiness

Analytical thinking

Documentation reading

Education

Graduation (BSC/ BCA/ BE/B.Tech/MSC IT)

Tools

ServiceNow

JIRA

SIEM

Windows

Linux

PowerShell

Python

Bash

Job description

Responsibilities

• Guaranties confidentiality of information;
• Ability to work independently and in a team;
• Follow process and documentation;
• Good problem solving abilities and analytical skills;
• High inclination in reading and understanding technical documentation;
• Good Written and oral skills in English;
• High degree of commitment and diligence;
• Willingness to work 24x7 shifts.

Technical Requirements

• Strong expertise in Endpoint Security tools including monitoring, threat detection, and remediation.
• Developed and maintained security playbooks and automated workflows to improve incident response efficiency.
• Extensive experience in Incident Response, including investigation, triage, containment, eradication, recovery, and post-incident analysis.
• Strong understanding of the MITRE ATT&CK framework, Cyber Kill Chain, IOC/IOA analysis, and threat detection methodologies.
• Investigate and triage DLP alerts to identify potential data exfiltration, policy violations, or insider threats.
• Good working knowledge of SIEM platforms for log collection, event correlation, alert triage, threat hunting, and security monitoring.
• Strong knowledge of log analysis, including Windows Security, System, and Application logs, authentication events, account lockouts, privilege escalation, and suspicious process execution.
• Proficient in Scripting and Automation using PowerShell, Python, and Bash to improve operational efficiency.
• Good knowledge of Vulnerability Management, including scanning, risk prioritization, and remediation tracking.
• Good understanding of Operating Systems: Windows Server, Windows 11, and Linux distributions.
• Hands-on experience working with Linux OS administration and security hardening.
• Experienced in validating and verifying system security requirements, performing security analysis, and designing secure system architectures.
• Conduct root cause analysis RCA for security incidents and provide remediation recommendations;
• Work with IT, Cloud, Network, and Application teams during incident response.

Skills

• Strong understanding of task, project and responsibilities ownership
• Ability to work independently and as part of a team
• Willing to work off-hours in an on-call schedule
• Creative and innovative thinking
• Good organization skills to balance and prioritise work
• Analytical and problem solving skills to troubleshoot issues

Education/Training

• Graduation (BSC/ BCA/ BE/B.Tech/MSC IT) with no history of arrears.
• 5-7 years of Cybersecurity Experience

Professional Experience

• 5 to 7 years experience working within SOC Operations, Endpoint detection response incident handling, threat hunting, vulnerability management
• Experience working in Ticketing tools like ServiceNow, JIRA etc.
• Experience with OS like Windows, Linux for analysis
• Experience in SIEM tools for managing Playbooks
• Experience with DLP Incidence handling
• Experience with Log Source Monitoring
• Experience in Automation AI (Optional)