Senior SecOps Engineer

6-8 Years

Posted 4 hours ago
Be among the first 10 applicants

Job Description

Job Title: Senior SecOps Engineer

Location: India

Reports To: Security & Infra Director

Role Overview

We are seeking a highly technical and hands-on Senior SecOps Engineer to implement, operate, maintain, and continuously improve security infrastructure and tools across cloud and on-premises environments. This role is focused on day-to-day security operations, including monitoring, incident response, vulnerability remediation, security assessments, and ongoing hardening of operating systems, servers, endpoints, networks, and security platforms. The engineer will be expected to perform most technical changes and remediation activities directly, while coordinating with IT, Infrastructure, SOC, Cloud, DevOps, R&D, and application owners where alignment, approvals, dependencies, or ownership boundaries are required.

Key Responsibilities

Security Infrastructure Operations
Implement, operate, maintain, and troubleshoot security infrastructure and tools across cloud and on-premises environments, including SIEM, XDR/EDR, vulnerability scanners, DLP, CASB, identity security, remote access, and monitoring platforms.
Perform hands-on configuration, administration, upgrades, tuning, rule management, policy changes, and health monitoring of security systems and supporting infrastructure.
Maintain secure configurations and hardening baselines for Windows, Linux servers, cloud workloads, network devices, endpoints, and security appliances.
Support deployment and lifecycle management of security tools for data centers, branch offices, cloud environments, R&D environments, and corporate infrastructure.
Investigate operational issues, perform root-cause analysis, and implement the required technical fixes to improve stability, visibility, performance, and security coverage.
Create and maintain operational documentation, runbooks, procedures, configuration standards, and implementation guides for security systems.
Ensure security infrastructure operates reliably and supports compliance, audit, risk management, and business continuity requirements.
Security Monitoring & Incident Response
Investigate threats, respond to incidents, and perform the required technical containment, recovery, and corrective actions, while coordinating with SOC, IT, Infrastructure, and Cloud teams as needed.
Support threat hunting, security investigations, and operational reporting based on logs, telemetry, and security tool outputs.
Maintain and improve incident response playbooks, runbooks, and operational procedures.
Vulnerability Management & Security Assessments
Conduct regular security assessments across servers, operating systems, cloud workloads, endpoints, network devices, applications, and security platforms.
Operate and improve the vulnerability management program, including scanning, validation, prioritization, remediation tracking, and reporting.
Analyze vulnerabilities, misconfigurations, exposed services, weak controls, and security gaps, and recommend practical remediation actions.
Perform hands-on remediation of security findings, including configuration changes, hardening, patching coordination/execution, tool policy updates, and infrastructure fixes, while coordinating with IT, Infrastructure, Cloud, DevOps, and application owners where needed.
Validate remediation effectiveness through rescans, configuration reviews, control testing, and follow-up assessments.
Automation, Improvement & Collaboration
Develop scripts, automation, queries, dashboards, and workflows to improve monitoring, investigations, reporting, remediation tracking, and operational efficiency.
Implement security controls and technical improvements directly across cloud and infrastructure environments, while collaborating with cross-functional teams on dependencies, approvals, and ownership boundaries.
Continuously improve security operations processes, tooling, documentation, and metrics based on incidents, assessments, audit findings, and operational lessons learned.

Qualifications

Experience:
6+ years of hands-on experience in security operations, infrastructure security, system administration, network security, cloud security, or enterprise IT security.
Proven experience implementing, operating, maintaining, and troubleshooting security tools and infrastructure in cloud and on-premises environments.
Deep technical knowledge of Windows, Linux, servers, virtualization, networking, cloud platforms, identity services, endpoints, SIEM, XDR/EDR, vulnerability scanners, monitoring tools, and patch management.
Strong experience analyzing security logs, alerts, events, and telemetry from multiple sources to identify and respond to security incidents.
Hands-on experience with incident response, threat investigation, containment actions, root-cause analysis, and post-incident remediation.
Experience conducting security assessments, vulnerability scans, configuration reviews, hardening checks, and remediation validation.
Experience executing hands-on remediation activities, driving findings to closure, and coordinating with technical owners when dependencies or approvals are required.
Strong understanding of network security, firewall policies, VPN/ZTNA, segmentation, IAM, privileged access, endpoint protection, cloud security controls, and infrastructure hardening.
Ability to write clear operational procedures, incident response playbooks, security reports, technical documentation, and implementation guidance.
Hands-on experience with Linux and Windows based platforms.
Hands-on experience with firewalls, SIEM, XDR, CASB, DLP, EDR, vulnerability scanners, patch management, backup security, and configuration management tools.
Experience with monitoring, automation and orchestration systems.
Experience with securing R&D environments.
Certifications: Relevant certifications such as CISSP, SSCP, Security+, CySA+, GCIA, GCIH, GCED, CCNA/CCNP Security, Microsoft/Azure Security, AWS Security, or equivalent hands-on experience.
Skills:
Strong troubleshooting, analytical, and problem-solving skills in complex technical environments.
Ability to work independently, prioritize operational tasks, and personally drive incidents, investigations, implementations, and remediation activities to closure.
Excellent spoken and written English.
Strong communication skills with the ability to explain technical findings, risks, and remediation steps to IT, infrastructure, cloud, and security stakeholders.