onsite
Cybersecurity Operations Engineer - AEKZ Secuirglobe India
Security Engineer
Responsible for monitoring, investigating, and responding to security incidents across cloud, endpoint, network, and identity environments using SIEM, EDR/XDR and major cloud platforms.
About the role
Key Responsibilities
- Monitor security alerts and events from SIEM, EDR/XDR, and cloud security tools, ensuring timely detection of threats.
- Investigate and triage incidents across Azure, AWS, and Google Cloud environments, providing root‑cause analysis and remediation.
- Coordinate incident response activities, including containment, eradication, and post‑incident reporting.
- Maintain and tune security monitoring rules, dashboards, and playbooks to improve detection accuracy.
- Collaborate with infrastructure, identity, and network teams to implement security controls and hardening measures.
Requirements
- 3+ years of hands‑on experience in security operations, incident response, or SOC environments.
- Proficiency with SIEM platforms (e.g., Splunk, QRadar, Sentinel) and endpoint detection and response tools.
- Strong knowledge of cloud security best practices for Microsoft Azure, Amazon Web Services, and Google Cloud Platform.
- Experience analyzing security events, creating alerts, and developing response playbooks.
- Relevant certifications such as CISSP, CISM, or cloud security certifications are a plus.