Cyber Security Engineer (Detection and Response)

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. Releases go out Tuesday mornings, never on Fridays.

Role overview:

Our team is growing and we are hiring a Cyber Security Engineer (Detection and Response). We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Fully remote. You can work from anywhere in India. Normal working hours, Monday to Friday. A quiet workspace and good internet are required.

Duties:

• Run threat modelling sessions with engineering teams on new features and architecture changes
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Assess third-party vendors and SaaS integrations for security risk
• Coordinate external penetration tests and track remediation
• Write secure coding guidelines and run developer training
• Automate security checks in CI/CD pipelines
• Respond to security incidents and lead the technical investigation

Qualifications:

• 3+ years in security engineering, application security or a related engineering role
• Programming or scripting ability in Python, Go or similar
• Ability to explain security issues to engineers without lecturing them
• Experience with SIEM, EDR or vulnerability management tools

Salary: ₹14,50,000 - ₹18,50,000 per year

What we offer:

• Health insurance for you and your family
• Provident fund
• Paid leave
• Learning budget

Candidates must be eligible to work in India.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Stonehill Data Pvt Ltd.