Threat Monitoring Security Engineer

HireFlex; India; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Join a leading company as a Threat Monitoring Security Engineer, responsible for enhancing security measures and managing SIEM tools. This role demands a skilled engineer with 5+ years of experience and a strong knowledge of security frameworks and cloud environments. Collaborate with teams to build robust security architectures and engage with stakeholders to ensure effective communication in a dynamic environment.

Qualifications

• 5+ years working experience as security platform engineer.
• Excellent knowledge of English, written and verbal.
• Experience in automation, coding and/or scripting.

Responsibilities

• Fine-tune SIEM tools to identify and repel threats.
• Support EDR tool lifecycle management.
• Maintain tools, planning rules, and documentation.

Skills

Security Information and Event Management (SIEM)

Azure infrastructure

Linux security

Containerized environments security

Cloud security

DevSecOps

CICD in Azure

Automation

Python

Education

Bachelor's degree in Information Technology or related field

Tools

Azure Sentinel

ServiceNow

Job description

Join to apply for the Threat Monitoring Security Engineer role at HireFlex

Join to apply for the Threat Monitoring Security Engineer role at HireFlex

The Threat Monitoring Security engineer is part of the Cyber Defense and Operations Tribe and is one of the professionals who do the work of delivering a potentially releasable increment of the product at the end of each sprint. Product Teams are structured and empowered by the organization to organize and manage their own work. The resulting synergy optimizes the Product Team’s overall efficiency and effectiveness.

Your responsibilities would include:

As part of the Threat monitoring /platform security engineering part role you are expected to;

• Security Information and Event Management (SIEM) Engineers fine-tune the SIEM tools needed to identify and repel threats. They work closely with other members of the team, especially if the system is under attack.

• Support in EDR tool lifecycle management

• Security engineers are responsible for maintaining tools, tools lifecycle, planning of rules and use case building, maintaining, retirement and improvements, maintaining software and infrastructure related to SIEM solutions, and updating systems.

• Security engineers are responsible for building the security architecture and systems, being part of the SIEM content development teams. They typically work with development operations teams to ensure that systems are up to date.

• Additionally, security engineers document requirements, procedures, and protocols to ensure that other users have the right resources.

• Working on DevSecOps pipelines and integrations to deploy and manage our defensive security stack.

You are a good Candidate if:

• 5+ years working experience as security platform engineer

• You understand the Agile mind set and have basic knowledge on working in a Scrum Team. You show end-to-end ownership on work that you do.

• Excellent knowledge of English, written and verbal

• You have experience with outsourced managed services, using ITIL processes Content/Technical experience:

• Ideally the candidate has experience within the process control domain with a cyber security context

• Extensive knowledge of security engineering, Azure infrastructure, Linux security, containerized environments security, and/or cloud security

• Extensive knowledge of CICD in Azure

• Experience in automation, coding and/or scripting using one or more of the following languages: Java, Perl, Python, Go, Ruby, Terraform and/or similar is a plus

• Operational experience with SIEM (Azure Sentinel)– Log Management and IPS/IDS technologies.

• Operational experience with the Microsoft security stack (Defender(s).)

• Experience with working with ServiceNow is a plus

• Knowledge of industry standard security frameworks for information systems (NIST or other like ISO 27001/2, CSA, COBIT)

• The Cyber Kill Chain & MITRE ATT&CK framework

• Basic knowledge on security solutions (SSL, Remote Access, IPSEC, Reverse Proxy, IDS/IPS, Firewall, Multi Factor Authentication)

• Intermediate knowledge of: o OT Security, OT Monitoring

o Network admin skills o Network security administrator

o Enabling services (e.g NTP, SMTP, patching, Antivirus)

o basic cryptography knowledge (basic algorithm knowledge)

Soft Skills:

• Being able to translate technical language into a story that can be understood, and cohesively present it back to different stakeholders with a clear message

• Provide clear, concise and easily consumable communication with key technical and nontechnical stakeholders

• People skills: you can work with people of many different cultures and backgrounds.

• Able to work in a complex and highly externalized environment

• Interested in continuous self-development through training and learning on the job. Being curious about new developments and technologies; educating yourself.

• Critical thinking and contextual analysis abilities;

• Investigative and analytical problem solving skills;

• Strong time management skills and willing to go above and beyond where required

• Working in a highly dynamic environment, whit high pressure situations

• Ability to take decisive action based on available information in a timely manner;

• Ability to research and characterize security threats to include identification and classification of threat indicators;

• Strong time management skills and willing to go above and beyond where required

• Be passionate about mentoring and coaching junior resources, sharing knowledge

• Having continuous improvement mentality that helps improve and grow the team

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Staffing and Recruiting

Referrals increase your chances of interviewing at HireFlex by 2x

Get notified about new Security Engineer jobs in India.

Security Operations Engineer - Incident Response

Offensive Security Engineer, Offensive Security

Information Security Analyst Level III - SIEM

Network Security Engineer / ITIL Security Specialist

Staff Engineer, Security Engineering Partner

Associate Security Operations Center Engineer (Remote)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.