Staff Security Operations Engineer
Bengaluru · 5+ years experience · Hybrid · Posted Oct 13, 2026
At a glance
- Experience
- 5+ years experience
- Workplace
- Hybrid
- Location
- Bengaluru
About the role
- Conviva is seeking an experienced Staff Security Operations Engineer with 8 to 10 years of hands-on expertise to lead security operations, threat detection, incident response, and security automation efforts.
- The role involves safeguarding enterprise systems, cloud environments, and critical assets from cyber threats while designing, implementing, and maintaining advanced detection and response capabilities.
Responsibilities
- Lead the monitoring, detection, and continuous improvement of security operations across multi-cloud and hybrid enterprise infrastructure.
- Optimize SIEM and SOAR platforms by creating and tuning custom detection rules, dashboards, and automated response playbooks.
- Proactively conduct threat hunting using threat intelligence feeds, behavioral analytics, and indicators of compromise (IOCs) to identify hidden risks.
- Serve as the technical lead for high-severity security incidents, managing end-to-end containment, eradication, recovery, and post-incident root-cause analysis (RCA).
- Direct digital forensics and incident response (DFIR) investigations across endpoints, networks, and cloud logs.
- Maintain and conduct periodic tabletop exercises to ensure incident response plans remain updated and effective.
- Drive "Security as Code" principles by integrating security controls and continuous automated monitoring into CI/CD pipelines and IaC.
- Develop custom automation scripts to streamline repetitive security tasks, reduce false positives, and accelerate MTTR.
- Design and enforce security policies for network security, IAM, zero-trust architectures, containerized environments, and SaaS applications.
- Collaborate with audit and compliance teams to ensure alignment with security frameworks such as ISO 27001, SOC 2, and GDPR.
Requirements
- 8–10 years of progressive cybersecurity experience, with at least 5+ years dedicated to Security Operations (SOC), Incident Response, or DevSecOps.
- Deep hands-on experience configured, managed, and tuned Enterprise SIEM and SOAR platforms.
- Deep familiarity with securing cloud infrastructure, cloud-native security tools, and identity controls.
- Strong proficiency in at least one programming/scripting language for automation and API integrations.
- In-depth knowledge of TCP/IP, OSI model, packet analysis, EDR/XDR systems, and OS security.
- Proven track record leading high-impact security incident investigations under pressure.
Preferred qualifications
- Bachelor's or Master’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.
- CISSP (Certified Information Systems Security Professional)
- GIAC certifications: GCIH, GCFA, GNFA, or GCDS
- CISM (Certified Information Security Manager)
- Cloud Security Certifications (AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or CCSP)
- Familiarity with Kubernetes, Docker, CI/CD platforms, and infrastructure-as-code tools.
Skills
- AWS
- Azure
- GCP
- Splunk
- Microsoft Sentinel
- Elastic
- Palo Alto XSOAR
- Swimlane
- Tines
- Python
- PowerShell
- Bash
Show all 15 skills
- Go
- Kubernetes
- Docker
