Job Description
Staff Security Engineer Detection & Response
Your goal to improve the education process and better the lives of students by keeping their data secure.
What you will do:
• Triage and investigate alerts from our SIEM/UEBA, endpoint detection and response, cloud, and email security platforms to determine whether indicators of compromise represent a real intrusion
• Declare, lead, and manage security incidents end to end endpoint compromise, cloud and infrastructure compromise, credential theft, phishing, and insider risk through containment, eradication, and recovery
• Own written incident documentation, including timelines, root cause analysis, and post-incident reviews that drive durable fixes rather than one-off cleanup
• Build, tune, and maintain detection content to expand coverage of real attacker behavior while reducing false positives and alert fatigue
• Develop and maintain incident response playbooks and runbooks
• Between incidents, contribute to security engineering work: deploying and operating security tooling in our cloud environment,
closing logging and telemetry gaps, and automating response actions
• Partner with IT, engineering, and cloud platform teams to drive remediation of identified weaknesses to closure
What you’ll bring
• 7+ years of relevant work experience, with significant time spent in security operations, detection and response, or incident response
• Hands-on experience investigating alerts across SIEM/UEBA and endpoint detection and response tooling, and separating true positives from noise at volume
• Demonstrated experience leading incident response from detection through recovery, including coordinating responders and stakeholders across teams
• Solid understanding of attacker tradecraft and common attack paths across endpoint, identity, network, and cloud, and familiarity with a framework such as MITRE ATT&CK;
• Working knowledge of security in cloud environments, ideally AWS, including identity, loggi
📌 Staff Security Engineer – Detection (India)
🏢 Chegg
📍 India