Senior Security Engineer - DART
The Senior Security Engineer will build and operate detection and incident-response capabilities across cloud production and corporate environments. The role requires 7+ years of security engineering experience, AWS expertise, threat hunting, investigations, automation, and SIEM/SOAR proficiency.
About the job
Responsibilities
- Respond to security events; triage, investigate, analyze incidents, and communicate findings to stakeholders.
- Improve detection and response processes, procedures, and technologies.
- Develop and operate tools that gather security telemetry from cloud production systems.
- Automate workflows and improve security-event identification and response times.
- Build and optimize detection rules.
- Develop runbooks and incident playbooks for new and existing detections.
- Lead threat-hunting practices and identify product and infrastructure signals for attack detection.
- Incorporate threat-hunting findings into security controls.
Requirements
- 7+ years of full-time security engineering experience, including security monitoring, incident response, and cloud-environment threat hunting.
- Defensive security expertise with an understanding of offensive security and compromise scenarios.
- Experience leading complex investigations involving many stakeholders.
- Strong written and verbal communication skills.
- Expertise with AWS security controls and services.
- Coding experience for automation, alert enrichment, and detection development.
- Knowledge of adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK.
- Hands-on experience with data analysis, modeling, and correlation at scale.
- Operating-system internals and forensics experience across macOS, Windows, and Linux.
- Experience managing and using SIEM and SOAR platforms.
- Experience developing tools and automation with DevOps toolsets and programming languages.
- Understanding of malware functionality and persistence mechanisms.
- Ability to analyze endpoint, network, and application logs for anomalous events.
Skills
AWS, Incident Response, Threat Hunting, Security Monitoring, Mitre Att&Ck, SIEM, Soar, Cloud Security, Python, DevOps, Malware Analysis, Digital Forensics, Log Analysis, Security Automation, Detection Engineering
Similar jobs
Security Engineering jobs
GoHighLevel
India
Leads application and AI security assessments across web, API, cloud-native, and LLM-based systems. Requires 8+ years of cybersecurity experience, hands-on penetration testing and secure SDLC expertise, and experience adversarially testing AI applications.
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.
Anyscale
IndiaOwn detection engineering and lead incident response across corporate and production environments, building cloud, endpoint, runtime, and Kubernetes coverage. The role requires 6+ years in security, hands-on detection development, and end-to-end incident leadership.
Anyscale
IndiaOwn Anyscale’s secure software development lifecycle, partner with engineering on secure architecture and features, and lead vulnerability management and remediation. The role requires 8+ years of product or application security experience and strong hands-on secure-development expertise.
GoHighLevel
India
The IT Compliance Manager will lead SOX ITGC and ITAC design, testing, audit coordination, and remediation across complex cloud and SaaS environments. The role requires 7–10 years of IT audit or technology risk experience, strong control-framework expertise, and the ability to influence engineering and finance stakeholders.