Senior Security Engineer,GIOC

The role

Senior Security Engineers own escalated investigations and lead incident response across SIEM, threat detection, identity and access, and endpoint/cloud telemetry. The role involves deep-dive analysis, threat hunting, forensics, and detection engineering to protect customer data and platform integrity.

What you will do

• Own alerts escalated from Security Engineers and drive investigations to closure
• Lead deep analysis using log correlation, endpoint and network forensics, and threat-intelligence enrichment
• Determine scope, root cause, and attacker activity
• Drive containment, eradication, and recovery actions
• Partner with L3 / Engineering SMEs on remediation
• Preserve forensic evidence and maintain chain-of-custody
• Act as technical lead on major-incident bridges
• Build and tune detections and correlation rules
• Conduct proactive threat hunting using MITRE ATT&CK framework
• Automate triage and response with SOAR playbooks and scripting

Required qualifications

• Graduate/Engineer in a relevant field (B.E./B.Tech, or equivalent)
• 5-8 years of experience in security operations, incident response, or a SOC
• Deep hands-on expertise with SIEM, EDR, log analysis, and endpoint/network forensics
• Strong understanding of attacker techniques, the MITRE ATT&CK framework, threat intelligence, and the incident-response lifecycle
• Proven experience leading complex investigations, containment/eradication, and root-cause analysis
• Detection-engineering and automation skills (Python, SOAR playbooks, detection-as-code)
• Familiarity with ITSM tooling
• Strong written and verbal communication
• Willingness and ability to work a rotational 24x7 shift and on-call model, including nights, weekends, and holidays
• Proficient in English verbal and written communication

Nice to have

• ITIL V4 certification
• Experience with security operations and IR frameworks (NIST, SANS)
• Security certification (GCIH, GCIA, GCFA, CySA+, or CISSP)
• Experience with detection-as-code, SOAR automation, and scripting (Python) for response workflows
• Exposure to cloud security, container/workload security, and GPU / high-density infrastructure
• Prior experience as a senior escalation / incident-response resource in a 24x7 SOC or command-center environment

Benefits

• Medical Insurance stipend paid annually
• 9 Company-Paid Holidays
• Generous Leave Policy
• 1 month paid sabbatical every 5 years
• Anniversary Bonus each year
• Professional Development Reimbursement
• Internet reimbursement
• Fitness membership reimbursement
• Company paid Wellable subscription

Before you apply

• Vultr will not conduct a background check until after an offer of employment has been extended and accepted

About the company

Vultr is a cloud infrastructure company with 33 global cloud data center locations. It is the world’s largest privately-held cloud infrastructure company.