Security Engineer, GIOC

The role

Security Engineers will serve as the first line of response for security signals including SIEM, threat, identity, and access alerts. They will triage alerts, perform first-line containment, and preserve evidence in real time.

What you will do

• Monitor security signals from a consolidated single-pane-of-glass dashboard
• Acknowledge alerts and incidents within first-response SLA targets
• Perform initial review to validate detections and rule out false positives
• Classify alerts by severity and potential impact
• Route and assign tickets to the correct tower or escalation path
• Execute permitted L1 actions using documented runbooks
• Perform first-line containment and preserve evidence for analysis
• Document every step taken with supporting evidence and timestamps
• Escalate unresolved or out-of-scope alerts to Senior Security Engineers
• Maintain accurate shift logs, ticket updates, and incident timelines

Required qualifications

• Graduate/Engineer in a relevant field (B.E./B.tech or equivalent)
• 3–5 years of experience in a SOC, security operations, or IT operations
• Working knowledge of security fundamentals including authentication, access, common attack types, logging, and endpoint/network telemetry
• Familiarity with SIEM and alert-triage concepts, log analysis, and basic threat investigation
• Understanding of incident-management fundamentals and severity-based triage
• Exposure to monitoring/observability tools and ticketing systems
• Strong written communication for documentation and escalation handoffs
• Willingness and ability to work a rotational 24x7 shift model, including nights, weekends, and holidays
• Proficient in English verbal and written communication

Nice to have

• ITIL V4 Foundation certification or equivalent ITSM knowledge
• Security certification (CompTIA Security+, CySA+, or equivalent)
• Scripting familiarity (Bash, Python, or PowerShell) for routine automation
• Exposure to cloud security and GPU / high-density infrastructure
• Prior experience in a 24x7 SOC or command-center environment
• Experience with tools such as JIRA, Confluence, PagerDuty, SIEM, and observability platforms

Benefits

• Medical Insurance stipend paid annually
• 9 Company-Paid Holidays
• Generous Leave Policy
• 1 month paid sabbatical every 5 years
• Anniversary Bonus each year
• Professional Development Reimbursement
• Internet reimbursement
• Fitness membership reimbursement
• Company paid Wellable subscription

Before you apply

• Vultr will not conduct a background check until after an offer of employment has been extended and accepted

About the company

Vultr is a cloud infrastructure company with 33 global cloud data center locations. It is the world’s largest privately-held cloud infrastructure company.