Why Mizuho

At Mizuho, we provide the stability of an international industry leader with the career trajectory of a growing business. Our steady, strategic growth gives our people at all levels rewarding degrees of responsibility and richer work experience than a boutique firm or an established giant could offer alone.

It’s the local expertise of our employees that makes our global network so powerful. By collaborating with colleagues and clients who share the same ambition and drive, you can amplify your sphere of influence and base of knowledge as part of one of the largest banks in the world.

Summary:

The Senior Platform Security Engineer is responsible for the engineering, integration, optimization, and operational management of the organization's security operations platforms, with primary ownership of Splunk Enterprise Security (SIEM) and Palo Alto Cortex XSOAR (SOAR) .

This role serves as the technical owner of the Cyber Fusion Center platform ecosystem, ensuring scalable, resilient, and high-performing capabilities that enable effective threat detection, investigation, response, and automation. The ideal candidate is a hands-on engineer with demonstrated experience in SIEM/SOAR engineering, security data pipelines, detection engineering, automation, and platform architecture.

Key Responsibilities:

Platform Engineering & Security Data Management

- Design, implement, and maintain Splunk Enterprise Security and Cortex XSOAR platforms to ensure scalability, resilience, performance, and operational effectiveness.
- Engineer and manage security data pipelines including log onboarding, normalization, enrichment, correlation, and quality validation.
- Lead onboarding of new log sources, detection content, use cases, and automation capabilities.
- Manage platform lifecycle activities including upgrades, patching, capacity planning, high availability, disaster recovery, and operational support.
- Optimize platform performance, search efficiency, data retention, and overall platform reliability.

Detection Engineering & Automation

- Develop and maintain Splunk correlation searches, alerts, dashboards, data models, and analytics content aligned to threat intelligence and attacker behaviors.
- Build and enhance Cortex XSOAR playbooks, integrations, and automation workflows that reduce manual effort and improve response effectiveness.




- Partner with SOC, Threat Hunting, and Incident Response teams to translate security use cases into scalable detection and automation solutions.
- Drive measurable improvements in alert quality, automation coverage, MTTD, and MTTR.

Platform Integrations & Continuous Improvement

- Design and maintain integrations between security platforms and enterprise technologies using APIs, automation frameworks, and scripting.
- Support integration of EDR/XDR, Vulnerability Management, Threat Intelligence, Cloud Security, IAM, and ITSM technologies.
- Ensure platform security, availability, audit readiness, and compliance with organizational standards.
- Develop technical documentation, runbooks, architecture standards, and operational procedures.
- Mentor junior engineers and collaborate with Security Operations, Detection Engineering, Incident Response, Infrastructure, Cloud, IAM, and Compliance teams.
- Present platform metrics, roadmap updates, and improvement recommendations to cybersecurity leadership.

Required Qualifications:

- 12+ years of experience in cybersecurity and security platform engineering, including demonstrated experience designing, implementing, and operating enterprise-scale SIEM, SOAR, and security analytics platforms supporting Security Operations Centers.
- Demonstrated hands-on experience with Splunk Enterprise Security , including architecture, administration, data onboarding, CIM normalization, content development, clustering, and performance tuning.
- Demonstrated hands-on experience with Palo Alto Cortex XSOAR , including playbook development, integrations, orchestration, and automation workflows.
- Demonstrated experience integrating security technologies using APIs, automation frameworks, and scripting languages, including strong Python development skills.
- Solid understanding of detection engineering, incident response, threat hunting, security operations processes, and security platform architecture.




- Strong understanding of networking, endpoint, cloud, and identity security concepts.
- Experience managing platform lifecycle activities including upgrades, patching, resiliency, capacity planning, and disaster recovery.
- Excellent analytical, troubleshooting, communication, documentation, and stakeholder management skills.
- Bachelor's degree in Computer Science, Information Security, Information Technology, Engineering, or equivalent experience.

Preferred Qualifications:

- Experience with Microsoft Sentinel or other enterprise security analytics platforms.
- Experience integrating Threat Intelligence, Vulnerability Management, Cloud Security, IAM, and ITSM technologies.
- Familiarity with Infrastructure-as-Code, CI/CD pipelines, and security automation practices.
- Experience supporting large enterprises or highly regulated environments, preferably within financial services.
- Certifications such as Splunk Enterprise Security Certified Admin/Architect, Palo Alto Cortex XSOAR Engineer, GCIH, GCIA, CISSP, or equivalent

Company Overview: Mizuho Pune is an integral part of Mizuho Financial Group, one of the world’s leading financial institutions with a strong global presence across the Americas, EMEA, and Asia. Based in India, Mizuho Pune supports Mizuho’s international businesses by delivering high-quality, scalable, and resilient services across multiple functions.

Mizuho Pune plays a critical role in driving operational excellence, standardization, and innovation for Mizuho Americas. By combining deep domain expertise with strong process, technology, and analytical capabilities, it partners closely with regional and global teams to support corporate and investment banking, capital markets, and corporate services functions, while adhering to the highest standards of risk management, regulatory compliance, and control.

Mizuho Pune offers competitive compensation and benefits package aligned with industry standards and local market practices.

Mizuho Pune is an equal opportunity employer and is committed to fostering an inclusive and diverse workplace.

Employment is subject to applicable background verification checks in accordance with Indian laws and company policies.

https://www.mizuhogroup.com/asia-pacific/mizuho-global-services/careers

📌 Senior Platform Security Engineer Lead (Pune)
🏢 Mizuho
📍 Pune