Senior Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in India. As a Senior Security Engineer, you will play a critical role in protecting global organisations against sophisticated cyber threats through advanced detection engineering, threat intelligence, and proactive security operations. You will investigate complex cyberattacks, analyse adversary behaviour, and develop scalable detection capabilities that strengthen enterprise and cloud security. Working at the intersection of security research, engineering, and incident response, you will transform threat intelligence into automated defensive solutions. You will leverage Python, AI-driven detection technologies, and large-scale telemetry to identify emerging threats and improve security outcomes. Collaborating with internationally distributed teams and engaging directly with customers, you will provide expert technical guidance during critical incidents and complex investigations. This remote opportunity is ideal for an experienced security professional who combines deep technical expertise with a strong investigative mindset and a passion for building innovative security solutions. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 Accountabilities Cyber Threat Investigation: Investigate sophisticated cyberattacks, analyse adversary behaviour, correlate security telemetry, and identify indicators of compromise to support effective threat detection and mitigation. Detection Engineering and Development: Design, develop, deploy, and monitor production-grade detection logic and methodologies across large-scale security telemetry. Build reliable, scalable solutions that improve threat visibility and strengthen defensive capabilities. Incident Response and Technical Support: Triage high-severity security incidents, conduct in-depth investigations, communicate findings, and provide advanced technical support to customers facing complex security challenges. Threat Intelligence Integration: Translate actionable threat intelligence into practical detection strategies and automated defensive measures. Monitor evolving attacker tactics, techniques, and procedures (TTPs) to identify emerging risks and enhance security coverage. AI-Driven Detection Optimisation: Analyse AI-generated security detections, assess their accuracy and effectiveness, and collaborate with security researchers to refine detection models, reduce false positives, and improve threat identification. Security Automation and Data Pipelines: Develop and maintain scalable security data pipelines and automation workflows using Python, scripting, APIs, and other relevant engineering technologies. Cloud and Network Security: Apply expertise in cloud-native architectures, network protocols, operating system internals, and extended detection and response (XDR) platforms to investigate threats and strengthen security controls. Research and Engineering Collaboration: Work closely with threat researchers, security engineers, and global operational teams to translate research findings into production-ready detection capabilities and practical customer solutions. Customer-Facing Security Expertise: Serve as a trusted technical advisor during complex investigations and critical incidents. Explain technical findings, including AI-driven insights, clearly and recommend security improvements tailored to customer environments. Operational Excellence and Knowledge Sharing: Collaborate with geographically distributed teams to ensure consistent operational coverage, effective incident handovers, and continuous knowledge sharing. Contribute to the ongoing improvement of detection processes, investigation methodologies, and security engineering standards. Requirements Professional Experience: At least 5 years of cybersecurity experience across security engineering, cloud-native environments, extended detection and response (XDR), security operations centres (SOCs), or related disciplines. Threat Investigation Expertise: Strong experience investigating complex security incidents, analysing attacker behaviour, correlating diverse telemetry sources, and identifying techniques used by sophisticated threat actors. Detection Engineering: Proven ability to design, develop, deploy, and maintain scalable detection logic and production-grade security solutions across high-volume telemetry environments. Programming and Automation: Strong coding and scripting skills, particularly in Python, with experience building and maintaining security data pipelines, automating detection workflows, and integrating systems through APIs. Threat Intelligence and Security Frameworks: Deep understanding of threat intelligence, attacker tactics and techniques, and the MITRE ATT&CK framework, with the ability to translate intelligence into actionable defensive measures. Cloud and Network Security: Solid knowledge of cloud-native architectures, network protocols, operating system internals, and modern enterprise security technologies. AI and Machine Learning: Experience applying AI or machine learning to anomaly detection, threat identification, security automation, or detection workflow optimisation. Ability to assess AI-generated findings critically and improve their reliability. Incident Response Capabilities: Experience triaging high-severity incidents, conducting technical investigations, identifying root causes, and communicating findings and remediation recommendations effectively. Customer Engagement and Technical Communication: Strong communication and presentation skills, with the ability to explain complex security concepts to technical and non-technical stakeholders and deliver customer-specific security guidance. Analytical and Problem-Solving Skills: Excellent investigative judgement, attention to detail, and structured reasoning, combined with the engineering discipline required to build reliable, maintainable security solutions. Collaboration and Ownership: Ability to work independently on complex technical challenges while collaborating effectively with globally distributed research, engineering, and security operations teams. Adaptability and Continuous Learning: Comfortable working in a fast-paced cybersecurity environment, staying current with emerging attack techniques, AI-driven security capabilities, and evolving cloud and network threats. Benefits Remote Working Flexibility: Work remotely from India, with flexibility to organise your work according to role requirements and team collaboration needs. Health and Wellbeing Support: Access to employee benefits designed to support health, wellbeing, and personal needs. Financial Benefits: Access to financial wellbeing benefits and programmes, subject to the applicable employment package. Innovative Security Environment: Opportunity to work on advanced threat detection, security research, AI-driven analytics, and enterprise-grade cybersecurity solutions. Professional Development: Opportunities to deepen expertise in detection engineering, incident response, threat intelligence, cloud security, and security automation. Global Collaboration: Work alongside international teams of security researchers, engineers, and specialists tackling complex cybersecurity challenges. Customer Impact: Contribute directly to protecting organisations from sophisticated cyber threats and improving their security posture. Flexible Work Approach: A work model designed to support productivity and individual working preferences, whether remotely or through other arrangements permitted by the role.