Senior Information Technology Security Engineer

Summary

The Senior Technical Security Engineer is responsible for implementing, managing, and improving information security controls to protect the organizations systems, networks, and cloud environments. This role involves working closely with internal teams to proactively mitigate risks, detect threats, and ensure compliance with security policies and industry best practices

Key Responsibilities

Security Engineering & Implementation

• Deploy, configure, and maintain security technologies, including firewalls, IDS/IPS, endpoint security, and XDR solutions. Work closely with IT and DevOps teams to integrate security into system and application architectures.

Threat Detection & Incident Response

• Monitor security alerts and investigate incidents to identify root causes and remediation actions. Support security operations teams in responding to threats and improving detection and response capabilities.

Endpoint, Cloud, and Network Security

• Implement and manage security controls for endpoints, cloud environments, and networks. Work on securing hybrid cloud infrastructures and enforcing Zero Trust principles

Vulnerability & Patch Management

• Conduct security assessments and penetration tests to identify vulnerabilities. Work with IT teams to prioritize and apply security patches and remediations.

Compliance & Risk Management

• Assist in maintaining compliance with industry regulations (ISO 27001, GDPR, HIPAA). Participate in security audits, risk assessments, and policy development to strengthen the organizations security framework.

Security Awareness & Collaboration

• Work closely with internal teams to provide security guidance and training. Contribute to security awareness programs to enhance the organizations security culture.

Functional Competencies (Technical knowledge/Skills)

• Strong knowledge of security frameworks (NIST, ISO 27001, CIS Controls).
• Hands-on experience with security tools such as firewalls, IDS/IPS, EDR, and XDR solutions.
• Understanding of cloud security in AWS, Azure, or GCP.
• Experience with vulnerability management and penetration testing.
• Knowledge of IAM, PAM, and Zero Trust security principles.
• Strong analytical skills and problem-solving capabilities.
• Effective communication skills to work with technical and non-technical teams.

Experience, Education, and Certifications

• 9+ years of experience in cybersecurity, with hands-on expertise in security engineering.
• Bachelors degree in Computer Science, Cybersecurity, or a related field.
• Relevant certifications such as CISSP, CEH, OSCP, or equivalent are preferred.
• Experience in security operations, incident response, and vulnerability management.
• Strong understanding of regulatory and compliance requirements in cybersecurity.

Work timings

Shift: 6am to 2pm IST or 2pm to 11pm IST