Senior Security Engineer SOC/MSSP & Detection Engineering

Senior Security Engineer – SOC/MSSP & Detection Engineering

Full-time contract | Remote, India | 18–24 lakh per year

Independent contractor engagement; no employee benefits.

Working hours: US Eastern Time business hours, Monday–Friday, 9:00 AM–6:00 PM ET

About Symosis Security

Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients strengthen security through managed operations, engineering, assessments, and incident response.

We're looking for a senior engineer who can investigate complex alerts, improve detection coverage, troubleshoot security platforms, and automate operational workflows.

What you'll do

• Investigate escalated security alerts and incidents across endpoint, identity, email, cloud, and network environments.
• Support incident response, threat hunting, containment recommendations, and root-cause analysis.
• Develop and tune detection rules, improve alert quality, and identify telemetry gaps.
• Maintain SIEM/EDR integrations, troubleshoot ingestion failures, and validate security platform health.
• Integrate security platforms with ticketing and response workflows through APIs and automation.
• Improve playbooks, investigation documentation, and incident closure quality.
• Use Python, PowerShell, and AI coding tools to build and validate practical security automation.
• Participate in agreed shift or on-call coverage and scheduled overlap with US teams.

Essential qualifications

• 5+ years of cybersecurity experience, including hands-on SOC investigations and security platform engineering.
• Experience handling escalations beyond dashboard monitoring and ticket forwarding.
• Strong hands-on experience with at least one of Microsoft Sentinel/Defender, CrowdStrike, or Rapid7.
• Working knowledge of Windows, Linux, networking, identity attacks, and incident response.
• Experience writing detection queries using KQL, SPL, or another platform query language.
• Practical Python or PowerShell skills and experience working with REST APIs.
• Strong written English and clear investigation documentation.
• Ability to independently drive assigned issues through investigation, remediation coordination, and closure.

Preferred qualifications

• Microsoft Entra ID, Microsoft 365, Azure, and Active Directory security.
• ServiceNow integrations, SOAR workflows, and detection-as-code.
• Fortinet administration, vulnerability management, or network troubleshooting.
• Relevant certifications such as SC-200, AZ-500, CrowdStrike, GIAC, or CISSP.

How to apply

Apply through LinkedIn and email [Confidential Information] with:

• Résumé, certifications, notice period, and expected annual contract fee.
• A brief example of a complex incident you investigated and your specific contribution.
• An example of a detection, integration, or automation you implemented.
• Your availability for US overlap, shifts, and on-call coverage.