Advisor, Cybersecurity Engineering
Operates and improves cybersecurity detection, response, identity, and cloud security controls across corporate, product, and R&D environments. The role requires cybersecurity operations experience, cloud and on-premises security expertise, and strong communication skills.
About the job
Responsibilities
- Serve as second-level Incident Response, interacting with a third-party SOC and acting as a security subject-matter expert on a shared on-call rotation.
- Operate and tune security tooling, including SIEM, SOAR, XDR/EDR, WAF, and NGFW, to improve detection and reduce noise.
- Apply identity-centric and Zero Trust controls, including access management, MFA, and least privilege, with IT platform and product teams.
- Advise engineering on secure-by-design patterns throughout the product and R&D lifecycle.
- Help mature security controls for data, AI services, and products.
- Maintain documentation and runbooks, develop metrics, and present findings to technical and non-technical audiences.
- Investigate security systems and automate recurring tasks through scripting or AI agents.
- Bridge technical and non-technical contributors.
Requirements
- 4–6 years of related cybersecurity operations experience with a bachelor's degree, or 2+ years with a master's degree.
- Hands-on production operation of security technologies in public cloud and on-premises environments, including vulnerability management, SIEM/logging, WAF, network segmentation and security groups, system hardening/STIG, malware prevention, and incident response.
- Intermediate knowledge of identity and access management and Zero Trust principles, including MFA, SAML, OAuth, OIDC, directory services, and least-privilege access.
- Working knowledge of networking concepts and Linux and Windows operating systems.
- Critical-thinking ability, continuous-improvement mindset, and collaborative working style.
- Strong written, verbal, and presentation skills, with the ability to communicate security decisions clearly to technical and non-technical audiences.
Nice-to-haves
- Experience securing customer-facing SaaS environments.
- Familiarity with ISO 27001, SOC 2, NIST, or CSA compliance frameworks.
- Experience in government or other regulated environments.
- Experience securing product and R&D or development environments, including container and Kubernetes security, infrastructure-as-code scanning, and secrets management.
- Familiarity with securing AI/ML workloads and AI-enabled tooling, including emerging AI-driven threats and defensive use cases.
- Group, team, or thought leadership in cloud or security operations initiatives.
- Threat hunting or red-team experience in complex enterprise environments.
- Industry-standard cybersecurity certifications; cloud or identity credentials are a plus.
Skills
Incident Response, SIEM, Soar, Xdr, Edr, Waf, Ngfw, Zero Trust, MFA, SAML, OAuth, OIDC, Azure, AWS, Kubernetes
Similar jobs
Security Engineering jobs
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.
Glean
Bengaluru, India
Secures Glean's software supply chain by managing vulnerabilities, hardening images, protecting open-source dependencies, and embedding trusted release controls in CI/CD. Requires 3+ years in application security or vulnerability management, strong cloud-native and container security knowledge, and experience with FedRAMP audits.
Coinbase
India
Owns frontline security alert triage, incident response, detection coverage, and automation across cloud, SaaS, container, and Web3 environments. Requires at least three years of hands-on security operations experience and proficiency with scripting, SIEM platforms, and threat intelligence tooling.
Greenlight
Bengaluru, India
Senior product security engineer responsible for embedding security across the SDLC, building security automation, conducting reviews and penetration testing, and leading vulnerability response. Requires 5+ years of security experience, strong web and mobile security expertise, and hands-on AWS, CI/CD, and security tooling knowledge.