Senior Security Engineer - 67167598002

Position : Senior Security Engineer

Work Hours (Client) : Full-time (Monday to Friday)

Pay Range : $ 2,200 to $ 2,600 / month (varies based on skill set and experience level)

Location of Search : Noida, India

Work Location : In Office

Company Overview:

Our client is a managed IT and cloud hosting provider built exclusively for tax and accounting firms in America.

Role Overview:

Our client is hiring a Senior Security Engineer to serve as its in-house Subject Matter Expert (SME) for security across their various businesses. As the hosted environment and managed services grow, security needs one owner who covers defense, offensive testing, hardening, audits, and documentation end-to-end. This is a hands-on specialist role that works with the Manager - IT, the infrastructure and identity SMEs, and the Support teams, and serves as the top escalation point for security issues in both lines of business. AI tools are part of the daily toolkit, and the incumbent selects the right tools for security work and guides others in using them safely.

Duties and Responsibilities:

Security Program & Compliance

• Own the security program, including policies, standards, the risk register, and the security roadmap, and present status and top risks to leadership.
• Own compliance readiness for SOC 2 Type II, IRS Publication 4557, the FTC Safeguards Rule, and the Company’s Written Information Security Plan (WISP), including evidence and audit support.
• Respond to client security questionnaires and audits, review vendor security risk, and serve as the security escalation point for compliance clients.

Detection & Incident Response

• Own detection and response on CrowdStrike Falcon, including policy tuning, threat hunting, and log analysis in Falcon LogScale, and coordinate with managed detection and response (MDR) providers where they are used.
• Lead security incidents, including malware, ransomware, and business email compromise (BEC), from containment through recovery, and deliver Root Cause Analysis (RCA) reports.
• Maintain the incident response plan and playbooks, and run tabletop exercises with the technical teams.

Offensive Security & Vulnerability Management

• Perform in-house vulnerability scans, internal penetration tests, Active Directory attack-path assessments, and phishing simulations, and prepare the scope for external penetration testing after internal audits are complete.
• Run the vulnerability management program, ranking findings by risk and tracking remediation with system owners to agreed timelines.

Hardening, Network Security & Enablement

• Define hardening baselines aligned with Center for Internet Security (CIS) benchmarks for servers, domain controllers, hypervisor hosts, the golden VM image, and Microsoft 365 tenants.
• Own Palo Alto firewall security policy, including rule reviews, client segmentation, VPN security, and the per-client rollout of licensed threat prevention modules.
• Review privileged access, multi-factor authentication (MFA) coverage, and backup protection against ransomware with the identity and backup owners.
• Build security documentation and staff awareness training, and mentor engineers on secure practices.

Role Modeling & Culture

• Technical mentoring: acting as the team's technical reference and mentoring agents on complex cases through shadowing, troubleshooting together and debriefs after a case is resolved.

Key Performance Metrics

• Detection & Response: Mean time to detect and contain incidents, and share of incidents closed with a completed RCA.
• Vulnerability Management: Critical and high findings fixed within agreed timelines, and open findings over time.
• Hardening & Audit: Share of systems meeting approved baselines, and audit findings closed on time.

Minimum Qualifications:

• A minimum of 9 years of hands-on information security experience, with 7 years of relevant experience, including at least 4 years in security operations or incident response at a managed service provider (MSP), hosting provider, or regulated business.
• Strong defensive skills, including Endpoint Detection and Response (EDR), log analysis, threat hunting, and incident handling in Windows and Active Directory environments.
• Hands-on offensive skills, including vulnerability scanning, penetration testing methods, and Active Directory attack paths.
• Working knowledge of firewall policy and segmentation, CIS-based hardening, Microsoft 365 security controls, and frameworks such as SOC 2 and the FTC Safeguards Rule.
• Demonstrated ability to explain risk to leadership and clients, write clear security documentation, and drive remediation across teams.
• Full professional fluency in written and spoken English, as the primary working language with United States–based clients.
• Availability to work a full night shift from the Noida office, covering United States business hours.
• Ability to operate independently with minimal day-to-day oversight and to take responsibility for significant security risks.
• 6. Preferred Qualifications
• Experience with CrowdStrike Falcon, Palo Alto Networks firewalls, Duo, Veeam, and Microsoft Defender for Office 365.
• Certifications such as OSCP, CISSP, or GIAC incident handling credentials.
• Experience in MSP, cloud hosting, or accounting and tax technology environments.
• Scripting in PowerShell or Python for security automation, and familiarity with AI tools such as Claude.