Key Responsibilities

- Monitor, investigate and respond to cybersecurity threats, suspicious activities and security incidents across enterprise systems and networks.

- Conduct proactive threat hunting, threat intelligence analysis and incident investigations to identify potential security risks.

- Perform adversary emulation, purple teaming and security testing to assess detection capabilities and identify security weaknesses.

- Develop and enhance threat detection use cases, monitoring rules and incident response processes.

- Analyse security logs and events using SIEM platforms such as Splunk and ELK.

- Develop automation scripts and security tools using Python to improve threat detection, investigation and response capabilities.

- Investigate endpoint, network and Linux-based security events, including anomalous system behaviours.

- Assess existing security controls against recognised cybersecurity frameworks and regulatory requirements.

- Identify security gaps, recommend technical remediation measures and support implementation with engineering teams.

- Evaluate emerging cybersecurity threats, including AI-related security risks, and recommend appropriate mitigation controls.

- Support security incident documentation, technical reporting and periodic on-call incident response activities.

Technical Requirements

- Minimum 5 years of hands-on experience in cybersecurity engineering, security operations, threat detection or incident response.

- Solid technical knowledge of threat hunting, incident response and security monitoring.

- Practical experience with red teaming,



penetration testing or adversary simulation techniques.

- Hands-on experience with SIEM and log analysis platforms, preferably Splunk or ELK.

- Proficiency in Python scripting for security automation and technical investigations.

- Strong understanding of Linux environments, command-line tools, operating system security and network security fundamentals.

- Experience investigating security incidents, identifying indicators of compromise and analysing suspicious activities.

- Familiarity with cyber threat intelligence, attack techniques and security detection methodologies.

- Understanding of AI security threats, vulnerabilities and associated security controls.

- Experience assessing technical security controls and supporting cybersecurity risk, compliance or regulatory requirements.

- Knowledge of recognised cybersecurity frameworks, including NIST and CIS Controls.

Good to Have

- Experience working in highly regulated environments, particularly financial services or technology-intensive organisations.

- Familiarity with MITRE ATT&CK;, threat intelligence platforms and advanced detection engineering practices.

- Knowledge of SEBI Cybersecurity and Cyber Resilience Framework (CSCRF).

- Experience with EDR/XDR platforms, endpoint forensics and network traffic analysis.

- Exposure to security testing frameworks, vulnerability assessment tools and purple teaming methodologies.

- Experience building automated security workflows, detection pipelines or incident response integrations.

- Relevant certifications such as OSCP, GCIH, GCFA, GCIA, CISSP or equivalent.

📌 Security Engineer (India)
🏢 Selby Jennings
📍 India