Senior Security Engineer

About the Role

The Senior Security Engineer role is a highly technical position responsible for strengthening the organization's cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. They will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They'll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape, with excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals being key to excelling in this security engineering role.

Key facts

What you'll do

Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security.

Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems.

Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events.

Utilize advanced threat intelligence to proactively identify and mitigate potential security risks.

Develop and implement detection rules and signatures to enhance threat detection capabilities.

Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles.

Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements.

Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function.

Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise.

Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products.

Should have strong understanding and experience with implementation of Zero trust.

Strong hands-on experience on deploying and managing IDS/IPS, WAF.

Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic's container, and Kubernetes infrastructure.

Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment.

Sound understanding of network protocols, firewalls, and networking concepts.

Able to understand the network architecture and contribute to bolstering the network security.

Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery.

Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively.

Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design.

Set up security tooling and secure defaults to ensure software security best practices are adhered.

Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure.

Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs.

Participate in Red-Teaming, Blue Teaming exercises.

Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities.

Should have experience and in-depth technical knowledge of security engineering, systems, and application security along with hands on experience in relevant tools.

Requirements

Eligibility and hard bars include a strong background in cybersecurity with proven work experience in security engineering roles focusing on cyber, endpoint, and infrastructure security. Candidates must demonstrate extensive experience with Zero Trust frameworks and implementations alongside hands on work with cloud security platforms such as AWS, Azure, and GCP. Proficiency in IDS/IPS, SIEM, WAF, and DLP technologies is mandatory, as is the ability to manage vulnerability remediation and lead incident response efforts. Experience with security automation, threat intelligence, and conducting security assessments for vendor risk management is required. A solid grasp of network protocols, firewall configurations, and network architecture is essential, along with the capability to analyze and improve network security postures. Experience with containerized environments and Kubernetes security is a necessary part of the role, as is participation in red and blue team activities. Candidates must be comfortable with scripting in Python, Bash, or Ruby to automate security tasks and support continuous improvement of security processes.