About this Opportunity

Join Ericsson’s Mobile Financial Services (MFS) team, where technology enables financial inclusion for millions of users across Africa, the Middle East, and Latin America. As a Security Specialist Engineer , you will support the security, reliability, and operational excellence of the Ericsson Wallet Platform, used by leading operators and banks for mobile financial services.

You will work in a global operations setting, contributing across the solution lifecycle, including security operations, troubleshooting, patching, upgrades, maintenance, and incident management.

What you will do

- Perform advanced triage and investigation of escalated security incidents.
- Conduct threat hunting and correlate security events across SIEM, EDR, firewalls, IDS/IPS, endpoints, cloud, and email security tools.
- Develop and fine-tune SIEM detection rules and security use cases.
- Analyze malware, suspicious artifacts, user behavior, and cloud activities.
- Coordinate incident containment, eradication, recovery, and remediation activities.
- Manage IAM controls, RBAC, least privilege, MFA, conditional access, and access reviews.
- Review and harden cloud resources, including VMs, storage, databases, Kubernetes, and serverless environments.
- Investigate CSPM findings, audit logs, vulnerabilities, and policy violations, and track remediation.
- Troubleshoot, reproduce, and resolve software and security issues while validating fixes and maintaining service operability.
- Support customer SLAs and KPIs, lead incident bridges,



and provide timely stakeholder updates.
- Contribute to patching, upgrades, maintenance, and continuous improvement of the solution.
- Participate in the operational shift roster to ensure service and security coverage.

What you will bring
- Bachelor’s degree in Software Engineering, Computer Science, or a related field.
- 2 - 5 years of experience in IT security, preferably within a SOC/NOC or service operations environment.
- Strong hands-on experience with Linux and Kubernetes , along with knowledge of cryptography, vulnerability management, SIEM, security audits, and HSM.
- Experience with cloud/SaaS security operations; AWS experience is preferred .
- Good understanding of SSL/TLS, PKI, certificate management, TCP/IP and networking.
- Experience with Docker/Kubernetes and security technologies such as SIEM, firewalls, IDS/IPS, vulnerability scanners, and endpoint security.
- Knowledge of security and compliance frameworks including PCI, CIS, NIST, and ISO .
- Scripting experience with Shell, Python, or Ansible is an advantage.
- Strong troubleshooting, root-cause analysis, documentation, communication, and stakeholder-management skills.
- Knowledge of ITIL and service operations processes such as incident, problem, event, change, and knowledge management is desirable.
- Collaborative, adaptable, customer-focused, and comfortable working in a shift-based operational environment.

“All academic credentials must be from recognized and accredited institutions and are further subject to verification.”

📌 Security Engineer (SOC + Linux and Kubernetes) (Gurugram)
🏢 Ericsson
📍 Gurugram