Palmiq is looking for a Senior SOC Engineer (L3) based in Hyderabad to lead our threat hunting, advanced incident response, and cyber defense engineering. This role acts as the ultimate technical escalation point within the Security Operations Center (SOC).

Key Functions & Role Expectations

- Advanced Incident Response & Escalations: Lead high-severity incident containment, eradication, digital forensics, and APT investigations. Provide top-tier on-call support for L1/L2 analysts.
- Threat Hunting & Detection Engineering: Proactively hunt threats across enterprise environments using the MITRE ATT&CK; framework. Build, tune, and optimize detection rules (KQL), SIEM (Microsoft Sentinel, Splunk), and XDR integrations.
- Security Automation & DLP: Design automated workflows and playbooks using Python, PowerShell, and Logic Apps. Manage Microsoft Purview DLP and Insider Risk policies.
- Architecture, Zero Trust & Engineering: Enforce Zero Trust principles, IAM/RBAC, and cloud security controls (WAF, DDoS, Firewalls, PIM/PAM) across Azure, AWS, and GCP.
- Problem & Change Management: Lead Post-Incident Reviews (PIRs), Root Cause Analysis (RCA), and act as change manager for critical system rollbacks.
- Leadership & Mentorship: Mentor L1/L2 SOC analysts, lead tabletop drills, and support executive compliance reporting.

Requirements 1. Education & Studies

- Degree: Must hold a BE / B-Tech degree in Computer Science or Electronics & Communication.
- Required Certification: Microsoft Security Operations Analyst (SC-200) or equivalent hands-on SIEM/XDR certification.

2. Professional Experience





- Cybersecurity Experience: Minimum 3 to 5 years of hands-on experience in SOC operations, cloud security, and incident response in regulated environments.
- SIEM & Query Mastery: Demonstrated expert-level proficiency with Microsoft Sentinel or Splunk, including advanced Kusto Query Language (KQL) writing.
- XDR & EDR Tools: Direct experience managing Microsoft Defender XDR, CrowdStrike, or SentinelOne.
- Threat Hunting & Forensics: Proven track record of threat hunting via MITRE ATT&CK; and conducting endpoint, cloud, and identity digital forensics.
- Automation: Practical experience automating security tasks using Python, PowerShell, or Logic Apps.
- Identity Security: Deep knowledge of Active Directory, Microsoft Entra ID, PAM, and hybrid identity attacks.

Preferred Experience & Certifications

- Highly Preferred Certifications: AZ-500 (Azure Security Technologies), SC-100 (Cybersecurity Architect Expert), GIAC (GCIH/GCFA), or CISSP.
- Framework Knowledge: Hands-on familiarity with NIST CSF, NIST 800-61, and CIS Controls.
- Advanced Tech: Experience with Kubernetes security, container runtimes, HashiCorp Vault, or OPA/Gatekeeper.

Work Schedule & Location

- Model: Remote initially; transition to in-person/hybrid in Hyderabad required next year.
- On site: Being able to move near Hyderabad next year.
- Work Schedule: Daily work hours depend directly on our clients' business hours, time zones, and operational needs.

Pay: ₹120,000.00 - ₹160,000.00 per year

Perks

- Work from home

Work Location: Remote

📌 Senior SOC Engineer (Hyderabad)
🏢 Technology Services
📍 Hyderabad