Senior Security Engineer

We are looking for a hands-on Senior Security Engineer to own and improve security operations across our corporate IT, cloud, and Kubernetes environments. The role covers security monitoring and detection, incident response, security tooling and integrations, automation, and day-to-day IT security.

What You'll Do
Own security monitoring, triage, investigation, and incident response across endpoint, identity, email, network, SaaS, GCP, and GKE settings.
Operate and improve security capabilities across SIEM, EDR, DLP, cloud security, network security, and identity security.
Integrate security tools and telemetry into the SOC to improve visibility, correlation, investigation, and response.
Build and tune detections, correlation rules, alerts, dashboards, and monitoring use cases based on attack scenarios and observed activity.
Build automated workflows for alert enrichment, triage, investigation, containment, escalation, and response using APIs and scripting.
Investigate incidents end-to-end, including scoping, evidence collection,



root-cause analysis, containment, remediation, and post-incident actions.
Monitor and investigate GCP and GKE activity, including IAM changes, service-account activity, cloud audit events, Kubernetes activity, workload behaviour, and network events.
Identify gaps and misconfigurations across cloud IAM, Kubernetes RBAC, workloads, containers, secrets, network controls, logging, and security configurations.
Manage and tune DLP controls and investigate potential data-exfiltration or policy-violation events.
Investigate phishing and account-compromise activity, including email headers, URLs, domains, attachments, authentication events, and indicators of compromise.
Support IT security across endpoints, device posture, identity and access, SaaS applications, privileged access, and security configurations.
Work with infrastructure and engineering teams to remediate security findings and improv

📌 Senior Security Engineer Bengaluru (India)
🏢 Arcana Analytics
📍 India