Job Title: Senior SecOps Engineer

Location: India
Reports To: Security & Infra Director

We are seeking a highly technical and hands-on Senior SecOps Engineer to implement, operate, maintain, and continuously improve security infrastructure and tools across cloud and on-premises environments. This role is focused on day-to-day security operations, including monitoring, incident response, vulnerability remediation, security assessments, and ongoing hardening of operating systems, servers, endpoints, networks, and security platforms. The engineer will be expected to perform most technical changes and remediation activities directly, while coordinating with IT, Infrastructure, SOC, Cloud, DevOps, R&D, and application owners where alignment, approvals, dependencies, or ownership boundaries are required.

Key Responsibilities

·Security Infrastructure Operations

oImplement, operate, maintain, and troubleshoot security infrastructure and tools across cloud and on-premises environments, including SIEM, XDR/EDR, vulnerability scanners, DLP, CASB, identity security, remote access, and monitoring platforms.

oPerform hands-on configuration, administration, upgrades, tuning, rule management, policy changes, and health monitoring of security systems and supporting infrastructure.

oMaintain secure configurations and hardening baselines for Windows, Linux servers, cloud workloads, network devices, endpoints, and security appliances.

oSupport deployment and lifecycle management of security tools for data centers, branch offices, cloud environments, R&D environments, and corporate infrastructure.

oInvestigate operational issues, perform root-cause analysis, and implement the required technical fixes to improve stability, visibility, performance, and security coverage.

oCreate and maintain operational documentation, runbooks, procedures, configuration standards, and implementation guides for security systems.

oEnsure security infrastructure operates reliably and supports compliance, audit, risk management, and business continuity requirements.

·Security Monitoring & Incident Response

oInvestigate threats, respond to incidents, and perform the required technical containment, recovery, and corrective actions, while coordinating with SOC, IT, Infrastructure, and Cloud teams as needed.

oSupport threat hunting, security investigations, and operational reporting based on logs, telemetry, and security tool outputs.

oMaintain and improve incident response playbooks, runbooks, and operational procedures.

·Vulnerability Management & Security Assessments

oConduct regular security assessments across servers, operating systems, cloud workloads, endpoints, network devices, applications, and security platforms.

oOperate and improve the vulnerability management program, including scanning, validation, prioritization, remediation tracking, and reporting.

oAnalyze vulnerabilities, misconfigurations, exposed services, weak controls, and security gaps, and recommend practical remediation actions.

oPerform hands-on remediation of security findings, including configuration changes, hardening, patching coordination/execution, tool policy updates, and infrastructure fixes, while coordinating with IT, Infrastructure, Cloud, DevOps, and application owners where needed.

oValidate remediation effectiveness through rescans, configuration reviews, control testing, and follow-up assessments.

·Automation, Improvement & Collaboration

oDevelop scripts, automation, queries, dashboards, and workflows to improve monitoring, investigations, reporting, remediation tracking, and operational efficiency.

oImplement security controls and technical improvements directly across cloud and infrastructure environments, while collaborating with cross-functional teams on dependencies, approvals, and ownership boundaries.

oContinuously improve security operations processes, tooling, documentation, and metrics based on incidents, assessments, audit findings, and operational lessons learned.

Qualifications

• Experience:

o6+ years of hands-on experience in security operations, infrastructure security, system administration, network security, cloud security, or enterprise IT security.

oProven experience implementing, operating, maintaining, and troubleshooting security tools and infrastructure in cloud and on-premises environments.

oDeep technical knowledge of Windows, Linux, servers, virtualization, networking, cloud platforms, identity services, endpoints, SIEM, XDR/EDR, vulnerability scanners, monitoring tools, and patch management.

oStrong experience analyzing security logs, alerts, events, and telemetry from multiple sources to identify and respond to security incidents.

oHands-on experience with incident response, threat investigation, containment actions, root-cause analysis, and post-incident remediation.

oExperience conducting security assessments, vulnerability scans, configuration reviews, hardening checks, and remediation validation.

oExperience executing hands-on remediation activities, driving findings to closure, and coordinating with technical owners when dependencies or approvals are required.

oStrong understanding of network security, firewall policies, VPN/ZTNA, segmentation, IAM, privileged access, endpoint protection, cloud security controls, and infrastructure hardening.

oAbility to write clear operational procedures, incident response playbooks, security reports, technical documentation, and implementation guidance.

oHands-on experience with Linux and Windows based platforms.

oHands-on experience with firewalls, SIEM, XDR, CASB, DLP, EDR, vulnerability scanners, patch management, backup security, and configuration management tools.

oExperience with monitoring, automation and orchestration systems.

oExperience with securing R&D environments.

oCertifications: Relevant certifications such as CISSP, SSCP, Security+, CySA+, GCIA, GCIH, GCED, CCNA/CCNP Security, Microsoft/Azure Security, AWS Security, or equivalent hands-on experience.

• Skills:

§Strong troubleshooting, analytical, and problem-solving skills in complex technical environments.

§Ability to work independently, prioritize operational tasks, and personally drive incidents, investigations, implementations, and remediation activities to closure.

§Excellent spoken and written English.

§Strong communication skills with the ability to explain technical findings, risks, and remediation steps to IT, infrastructure, cloud, and security stakeholders.