Senior Information Security Engineer

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior Information Security Engineer based in India.** In this role, you will help protect enterprise systems, networks, and sensitive information by strengthening security monitoring, identifying vulnerabilities, and responding to emerging cyber threats. You will work across information security operations, risk management, and infrastructure protection to maintain a resilient and secure technology environment. Using industry-standard security tools and monitoring platforms, you will investigate incidents, optimize threat detection capabilities, and coordinate remediation efforts. You will also collaborate with technical teams to implement security best practices, improve operational processes, and ensure compliance with established policies and service standards. Beyond day-to-day security operations, you will contribute to risk assessments, disaster recovery planning, and the continuous improvement of enterprise security capabilities. This opportunity is ideal for an experienced security professional who enjoys solving complex technical challenges and helping organizations stay ahead of an evolving threat landscape. ### Accountabilities - Monitor enterprise networks, systems, and applications for security threats, suspicious activity, vulnerabilities, and potential breaches, investigating incidents and coordinating appropriate responses. - Implement, operate, and maintain security controls and technologies, including firewalls, intrusion detection and prevention systems, endpoint protection, encryption, and content filtering solutions. - Conduct ongoing security monitoring and qualitative risk assessments to identify weaknesses, evaluate exposure, and strengthen the organization's information security posture. - Investigate security incidents, document breaches, assess their potential impact, coordinate remediation activities, and recommend preventive measures to reduce the likelihood of recurrence. - Identify and assess emerging cyber threats, vulnerabilities, exploits, and malware, coordinating with relevant technical teams to implement timely mitigation strategies. - Perform security operations and maintenance using tools for vulnerability assessment, security information and event management (SIEM), threat detection, malware analysis, and security reporting. - Develop, maintain, and optimize security event monitoring and analysis platforms, improving detection accuracy, operational visibility, and incident response effectiveness. - Build and maintain dashboards, reports, and data visualizations that communicate security risks, incident trends, and operational performance to relevant stakeholders. - Provide technical guidance to infrastructure, application, and operations teams on security standards, industry best practices, access controls, and secure system configurations. - Evaluate emerging security technologies and recommend appropriate tools, controls, and countermeasures to address evolving threats to information systems and privacy. - Support enterprise security policies, procedures, operational processes, and service-level agreements, ensuring consistent implementation across the information security operations function. - Follow ITIL-aligned incident, problem, and change management practices, contributing domain expertise to improve operational efficiency and service quality. - Support disaster recovery and emergency operating procedures, ensuring plans are documented, tested regularly, and aligned with business continuity requirements. - Conduct risk analyses to identify critical systems and business operations, assess the potential impact of disruptions, and recommend appropriate protection and recovery measures. - Escalate significant security issues and operational risks to the appropriate stakeholders, exercising sound professional judgment while managing multiple priorities and initiatives. ## Requirements - A minimum of **4–9 years of relevant professional experience** in information security, cybersecurity operations, security engineering, or a related technical field. - At least **15 years of formal education**, with a graduate or postgraduate degree in Computer Science, Information Technology, or a related discipline. - Strong understanding of networking fundamentals, common network services, security vulnerabilities, cyberattacks, and associated mitigation techniques. - Good knowledge of cryptography, application security, access control, malware, exploits, vulnerability management, and information protection principles. - Practical understanding of internet security, networking protocols, and security technologies, including IDS/IPS, firewalls, content filtering, and packet inspection. - Familiarity with enterprise firewall technologies such as Cisco and Palo Alto Networks, along with experience supporting network and data security capabilities. - Knowledge of cloud computing concepts, cloud security fundamentals, and the risks associated with enterprise cloud environments. - Basic scripting or automation skills to support security operations, analysis, reporting, and repetitive task optimization. - Understanding of Windows, Linux, and Unix server environments, including their security configurations and common operational challenges. - Hands-on experience with security tools and platforms such as Sourcefire, Symantec antivirus, Qualys, WebInspect, ArcSight SIEM, Vectra threat detection, ServiceNow, and FireMon, or comparable solutions. - Familiarity with vulnerability scanning, threat intelligence feeds, open-source security scanning tools, antivirus and malware analysis utilities, and security reporting platforms. - Experience monitoring, investigating, and responding to security events, performing risk assessments, and coordinating remediation activities across technical teams. - Ability to develop and maintain security monitoring capabilities, tune detection rules, optimize analysis platforms, and improve the effectiveness of security operations. - Understanding of ITIL-based incident, problem, and change management processes, including documentation, escalation, and service-level management. - Strong analytical and problem-solving skills, with the ability to assess complex security situations, prioritize risks, and make sound technical decisions. - Excellent communication and collaboration skills, including the ability to explain security risks, recommend controls, and guide technical teams on security best practices. - Strong organizational skills, adaptability, and the ability to manage multiple incidents, initiatives, and operational priorities in a fast-paced environment. ## Benefits - **Remote working:** Opportunity to work remotely from India, subject to the applicable employment and working arrangements. - **Full-time employment:** A full-time role focused on enterprise information security and cybersecurity operations. - **Competitive compensation:** Salary aligned with professional experience, technical expertise, and the overall employment package. - **Technical development:** Opportunities to deepen expertise in security monitoring, vulnerability management, incident response, and enterprise security engineering. - **Exposure to industry-standard tools:** Work with established security technologies spanning SIEM, threat detection, vulnerability assessment, firewalls, and security automation. - **Meaningful security impact:** Help protect critical business systems, strengthen organizational resilience, and reduce exposure to evolving cyber threats. - **Cross-functional collaboration:** Partner with infrastructure, application, and security teams to improve enterprise security standards and operational effectiveness. - **Continuous learning:** Develop knowledge of emerging threats, cloud security, security technologies, and evolving industry best practices. - **Inclusive workplace:** Contribute to a professional environment that values diversity, respect, collaboration, and equal employment opportunities. - **Healthcare and additional benefits:** Healthcare coverage, paid leave, retirement benefits, and other employment perks are subject to the partner company's policies and employment package.