Role Overview

We are looking for a hands-on Senior SOC / Security Engineer with 2-3 years of experience to support our security operations and engineering activities.

The role will focus on SOC monitoring, Wazuh SIEM operations, incident investigation, cloud security, vulnerability management, VAPT, application and API security, container/Kubernetes security, endpoint security, and DevSecOps.

The candidate will work closely with Cloud, DevOps, Development, IT, Infrastructure, and Compliance teams to identify, investigate, and remediate security risks.

Key Responsibilities

- Monitor and investigate security alerts, suspicious activities, and incidents using Wazuh SIEM and other security tools.
- Perform incident triage, investigation, escalation, containment, root-cause analysis, and remediation tracking.
- Analyze logs from AWS, servers, endpoints, firewalls, applications, Kubernetes, and network devices.
- Manage and support Wazuh SIEM, including:
- Agent monitoring and troubleshooting
- Log-source integration
- Alert investigation
- Custom rules and decoder creation
- Rule tuning and false-positive reduction
- Dashboard monitoring
- Security event correlation
- Integrate AWS CloudTrail, VPC Flow Logs, firewall logs, endpoint logs, Linux/Windows logs, and application logs into Wazuh.
- Perform cloud security assessments and identify configuration weaknesses and security risks.
- Review IAM roles, permissions, security groups, network configurations, access controls, and logging configurations.
- Conduct and coordinate vulnerability assessments, VAPT, retesting, and remediation tracking.
- Perform web application and API security testing.
- Support Docker, Kubernetes, and AWS EKS security assessments.




- Investigate vulnerabilities affecting operating systems, applications, containers, and open-source components.
- Support endpoint security, EDR monitoring, threat detection, and response activities.
- Work with application and infrastructure teams to ensure findings are remediated within defined timelines.
- Support secure SDLC and DevSecOps practices, including dependency, container, and vulnerability scanning.
- Assist in security reviews prior to production deployments.
- Maintain incident records, vulnerability trackers, remediation evidence, security reports, and operational documentation.
- Support security audits, compliance assessments, evidence collection, and remediation activities.
- Continuously improve SOC use cases, Wazuh detection rules, dashboards, alerting, and monitoring processes.

Required Skills

- 2-3 years of experience in SOC Operations, Cybersecurity, Security Engineering, or Incident Response.
- Hands-on experience with Wazuh SIEM or similar SIEM platforms.
- Understanding of Wazuh agents, manager, rules, decoders, alerts, dashboards, and log integrations.
- Experience in SOC monitoring, alert investigation, log analysis, and incident response.
- Good knowledge of AWS cloud security concepts.
- Understanding of IAM, networking, firewalls, VPNs, security groups, and access controls.




- Experience with vulnerability assessment and VAPT.
- Knowledge of OWASP Top 10 and API security risks.
- Basic understanding of Docker, Kubernetes, EKS, and container security.
- Familiarity with SIEM, vulnerability scanners, EDR, CSPM, web/API security testing, SAST, SCA, and container scanning tools.
- Positive knowledge of Linux and Windows security.
- Understanding of TCP/IP, DNS, HTTP/HTTPS, TLS, Syslog, firewalls, and network troubleshooting.
- Ability to analyze findings and provide practical remediation recommendations.
- Good communication, documentation, and stakeholder-management skills.

Good to Have

- Experience in Fintech, Payments, Banking, or Financial Services.
- Exposure to AWS, Kubernetes/EKS, CI/CD, and DevSecOps environments.
- Experience creating and tuning Wazuh custom rules and decoders.
- Exposure to AWS Security Hub, GuardDuty, Inspector, CSPM, or similar tools.
- Understanding of PCI DSS, ISO 27001, SOC 2, and related security requirements.
- Basic scripting knowledge in Python, Bash, or PowerShell.

Preferred Certifications

- CompTIA Security+
- CEH
- AWS Certified Security Specialty
- eJPT / eCPPT
- Blue Team Level 1 (BTL1)
- Equivalent SOC, Cloud Security, or Penetration Testing certification

Candidate Profile

- Hands-on and technically strong
- Comfortable working across both SOC operations and security engineering
- Capable of independently investigating security issues
- Comfortable working with multiple technical teams
- Able to prioritize and manage security findings
- Interested in solving real-world security challenges in a Fintech / Payments environment

📌 Senior SOC Security Engineer (Chennai)
🏢 Mylapay
📍 Chennai