Software Engineer - Infosec ops

ROLE OVERVIEW:

As a Software Engineer – InfoSec Operations, you will be responsible for executing core cybersecurity operations including threat detection, incident response, and vulnerability management across hybrid environments. You will work closely with cross-functional teams to ensure timely containment and remediation of threats, while continuously improving security posture through automation, analytics, and proactive risk mitigation. This role demands hands-on experience with SIEM platforms, threat intelligence frameworks, and cloud-native security tools, along with strong analytical and communication skills.

Requirements

Required Experience

• 1–4 years of experience in Infosec SecOps and Incident Response

• Hands-on experience in cybersecurity operations, including monitoring, detection, and response

• Experience with SIEM tools (Splunk, QRadar, LogRhythm)

• Familiarity with threat intelligence platforms and MITRE ATT&CK framework

• Experience with cloud security monitoring (AWS, Azure, GCP)

• Exposure to vulnerability management tools (Tenable, Qualys, Rapid7)

• Understanding of compliance frameworks (NIST, ISO 27001, SOC 2, CIS)

Essential skills

• Strong knowledge of network protocols, firewalls, IDS/IPS, and endpoint detection tools

• Ability to perform root cause analysis and produce incident reports

• Understanding of malware behavior, phishing campaigns, and attack vectors

• Scripting/automation skills in Python, PowerShell, Bash

• Experience with GCP security services (IAM, VPC Service Controls, Security Command Center)

• Hands-on with Cisco Firepower, Palo Alto, Proofpoint, Microsoft Defender, Wiz

• Experience with SOAR platforms and DevSecOps practices

• Strong threat modeling and risk assessment capabilities

Desired skills

• Familiarity with forensic tools (Volatility, FTK, Redline)

• Exposure to CI/CD pipeline security and cloud-native environments

• Excellent communication and documentation skills for cross-team collaboration

ROLES & RESPONSIBILITIES

Delivery and Execution

• Monitor and respond to security alerts and incidents across cloud and on-prem environments

• Conduct threat hunting and log analysis using SIEM tools

• Perform containment, eradication, and recovery activities during security incidents

• Develop automation scripts and dashboards to streamline workflows

• Collaborate with teams to define and implement security controls

• Maintain incident documentation and post-mortem reports Support and Enablement

• Support adoption of security tools and telemetry platforms across business units

• Maintain SOPs, playbooks, and audit documentation for operational readiness

• Provide on-call support for security incidents and escalations

• Align operations with compliance mandates and frameworks

• Mentor junior analysts and promote secure practices across teams

Benefits

WHAT WE OFFER

Be part of a globally recognized leader in the home improvement sector, committed to operational excellence and sustainability.

Opportunity to contribute to a rapidly expanding Global Technology Center (GTC) in Chennai, playing a vital role in global operations.

Exposure to diverse global technology environment and cross-functional team collaborations.

Competitive compensation package and comprehensive benefits.

Clear pathways for career advancement and continuous learning opportunities within a high-performance organization.