Job DescriptionCompany Overview

NCrest Data is the global leading provider of Data Analytics, Security, DevOps, Cloud Solutions, Software integrations, Analytics, and security-based technological services. With a clientele that includes several Fortune 500 corporations and some of the innovative Silicon Valley Startups

N.

nCompany URL: http://www.Crestdata.Ai

NJob Location - Ahmedabad

NAbout the Role: Lead Security Engineer

NExperience: 5+ Years

NResponsibilities:

N

n
- Architect and lead end-to-end security platform implementations across SIEM, EDR, SOAR, and related tooling;

including scoping, design, deployment, integration, and knowledge transfer.

N
- Serve as the primary technical point of contact for large, complex client engagements, managing stakeholder expectations and delivery quality simultaneously.
N
- Translate ambiguous client security requirements into structured implementation plans with defined milestones, acceptance criteria, and risk callouts.
N
- Develop detection content, response playbooks, and operational run books tailored to client environments and threat profiles, grounded in MITRE ATT&CK; coverage mapping.
N
- Identify gaps in clientsecurity posture through structured assessments and present prioritized, business-contextualized remediation roadmaps to both technical teams and executive stakeholders.
N
- Mentor and provide technical direction to mid-level and junior consultants on active engagements, setting quality standards for deliverables and client interactions.
N
- Contribute to pre-salesand solution scoping activities, including technical discovery, proposal development, and effort estimation. Drive internal knowledge development through documentation of repeatable methodologies, detection frameworks,



and lessons learned from client deployments.
N

nRequired Skills:

N

n
- Proven track record owning large client engagements — full lifecycle, from requirements through delivery — with direct accountability for outcomes and client satisfaction.
N
- Deep hands-on expertisewith at least two enterprise SIEM platforms (PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar), including architecture design, data onboarding, detection engineering, and performance tuning at scale.
N
- Hands-on experience with EDR platforms (CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) in enterprise deployment and operational contexts.
N

nNice to Have:

N- Advanced certifications: CISSP, CISM, GCIA, GCED, GCIH, or equivalent;

SIEM/platform vendor certifications (Splunk Architect, CrowdStrike Certified Falcon Administrator, etc.)

Nare a plus.

n- Cloud security architecture and implementation experience across AWS, Azure, or GCP — including native security services, cloud SIEM integration, and identity-based threat

Ndetection.

n

n
- Scripting and automation capability (Python, PowerShell, or Bash) applied to security engineering tasks: parser development, detection pipeline automation, or SOAR playbook construction.
N
- Prior experience in a formal people management, team lead, or technical lead capacity — even informally within a consulting engagement
N

nstructure.

n- Familiarity with pre-sales motions, including client discovery, solution design, and proposal support in a consulting or qualified services context

N. - Exposure to complianceand regulatory frameworks (NIST CSF, SOC 2, ISO 27001, PCI-DSS, HIPAA) as they apply to security architecture and control design.

📌 Lead Security Engineer (Ahmedabad)
🏢 Crest Data
📍 Ahmedabad