Senior Security Engineer, Detection & Response

This is a fully remote position, open to applicants in India.

📋 Description

• Develop, manage, and enhance SIEM/XDR capabilities, which include log ingestion, detection rules, alert optimization, and investigation processes.

• Create detection strategies to identify suspicious behaviors and patterns of data exfiltration.

• Broaden audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry.

• Examine and respond to security incidents within cloud infrastructure and applications.

• Conduct root cause analysis and implement long-term solutions.

• Execute proactive threat hunts across cloud and identity environments.

• Establish repeatable and effective threat-hunting workflows.

• Manage vulnerability assessments across infrastructure, platforms, and applications.

• Evaluate and validate external security findings, including those from bug bounty programs.

• Collaborate with engineering teams for remediation efforts.

• Assist in threat modeling and security design assessments.

• Leverage AWS and Kubernetes expertise to secure systems and guide teams on remediation practices.

• Support security controls in compliance with PCI DSS, SOC 2, and other regulatory requirements.

• Develop automation solutions, including AI, for security operations, detection, and response.

• Participate in the on-call rotation.

• Report to the Director of Information Security and work closely with security platform, network, and zero-trust engineering teams.

⛳️ Requirements

• A minimum of 6 years of experience in security, software, or infrastructure engineering.

• Practical experience in securing cloud-based production systems.

• Familiarity with SIEM platforms such as Wazuh, Splunk, or ELK.

• Proven experience in designing and refining detection rules, minimizing alert noise, and enhancing investigation workflows.

• Strong hands-on experience in vulnerability management, including scanning, triage, validation, remediation coordination, and verification.

• Comprehensive knowledge of AWS, Linux, and Kubernetes infrastructure.

• Ability to investigate issues utilizing logs, cloud tools, and system-level data.

• Experience evaluating detection and logging implications during design reviews.

• Awareness of common security vulnerabilities and mitigation strategies, including OWASP and SANS guidelines.

• Working knowledge of PCI DSS and SOC 2 compliance frameworks.

• Demonstrated current usage of AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

🏝️ Benefits

• Gross monthly salary ranging from $5,000 to $9,500 USD.

• Opportunities for remote work.

• AI-assisted engineering workflows.

• Involvement in global and remote team culture and activities.