Job Title: Lead Security Operations Engineer (Cloud Desktop Infrastructure)| Bangalore & Delhi (WFO)

Role Overview

We are seeking a highly skilled and hands-on Lead Security Operations Engineer to serve as the technical anchor for our cloud-based Linux Desktop security posture. As a senior Individual Contributor (IC), you will take end-to-end ownership of identifying, mitigating, and managing security risks across our Virtual Desktop Infrastructure (VDI), underlying Linux Operating Systems, and network architecture. This role requires a proactive defender who can seamlessly transition between performing deep-dive vulnerability assessments (VA) and penetration testing (PT) on desktop environments, architecting robust patch management for live sessions, and ensuring our cloud workspaces align with ISO 27001 and SOC 2 frameworks.

Note: We prioritize deep, hands-on technical capability, Linux internals expertise, and real-world problem-solving over formal security certifications.

Key Responsibilities

- Vulnerability Assessment & Penetration Testing (VA/PT): Lead continuous security assessments, authenticated/unauthenticated scans, and targeted penetration testing specifically focused on our cloud desktop fleets, session management, and underlying cloud infrastructure.
- Endpoint & OS Hardening: Drive rigorous OS hardening initiatives for our Linux desktop instances. Implement and monitor host-based controls, intrusion detection systems (HIDS), and mandatory access controls (e.g., AppArmor) tailored to secure lightweight desktop environments (like LXQt) and user sessions.




- Network & Remote Access Security: Design and enforce network security controls within a cloud-first ecosystem (Azure). Secure remote display protocols, NFS, VPC configurations, and ensure safe, encrypted access to cloud desktops.
- Workspace & Application Security: Secure the end-user workspace by enforcing browser security policies, isolating desktop applications, and performing dynamic/static testing on internal tools deployed to the desktops.
- Patch & Lifecycle Management: Architect automated, frictionless patching cycles for OS vulnerabilities and desktop dependencies across the fleet. Ensure timely remediation without compromising critical system uptime or disrupting active user sessions.
- Compliance & Audit Readiness: Translate ISO 27001 and SOC 2 requirements into technical controls for the VDI environment. Generate evidence, maintain security baselines, and act as the technical subject matter expert during external audits.
- Incident Response: Serve as the technical escalation point for security alerts, malware detections, or breaches within the desktop environment. Conduct root cause analysis, threat hunting, and implement post-incident containment.





Required Qualifications

- Experience: 7+ years of dedicated experience in Information Security or SecOps, with a proven track record of securing Virtual Desktop Infrastructure (VDI), Desktop-as-a-Service (DaaS), or large-scale Linux endpoint deployments.
- Offensive & Defensive Tooling: Hands-on mastery of industry-standard VA/PT and scanning tools (e.g., Tenable/Nessus, Qualys, Burp Suite, Metasploit, Nmap) applied to infrastructure and endpoints.
- Cloud Security: Deep understanding of cloud security architecture (Azure), specifically regarding identity and access management (IAM), network isolation, and securing compute instances used for remote desktops.
- OS Internals: Solid foundation in Linux internals, desktop environments, and system-level security mechanisms.
- Compliance Alignment: Practical experience implementing and auditing technical controls to satisfy ISO 27001 and SOC 2 frameworks within a dynamic cloud environment.
- Scripting & Automation: Proficiency in scripting languages (Python, Bash) to automate security workflows, build custom monitoring scripts, and orchestrate fleet-wide security updates.

Core Technology Stack & Domains

- Infrastructure: Azure, Linux Cloud Desktops, Remote Access Protocols
- OS & Systems: Linux (Ubuntu/Debian), LXQt, AppArmor, OS Hardening, NFS
- Security Testing: Nessus, Burp Suite, Metasploit. Linpeas,
- Networking: VPN/ZTNA, TCP/IP, DNS, Firewall Management (iptables/ufw)
- Automation: Python, Bash

📌 Lead Security Operations Engineer || Delhi & Bangalore (WFO) (Bengaluru)
🏢 RigvedIT
📍 Bengaluru