3 days ago
Bengaluru, IndiaMid Level
Responsibilities
- Design and implement security controls across AWS, Azure or GCP, Kubernetes, identity systems, and product infrastructure.
- Deploy, manage, and tune CNAPP, CSPM, EDR, SIEM, vulnerability management, and related security tools.
- Investigate, scope, and contain security incidents as a second- and third-line escalation partner and drive remediation with SOC and engineering teams.
- Perform post-incident root cause analysis and improve controls and detections based on findings.
- Validate vulnerability exploitability, write diagnostic scripts, and recommend risk-based remediation.
- Conduct threat modeling and security reviews for cloud architecture and product deployments.
- Build security automation and guardrails as code using Terraform, scripting, and security-tool integrations.
- Build and maintain AI agents and AI-assisted workflows for alert enrichment, incident investigation, log analysis, and vulnerability triage, while validating their accuracy and security.
- Automate incident response activities including evidence collection, containment, and stakeholder notifications.
- Assess AI systems and agentic integrations for identity, access, data exposure, prompt injection, and over-permissioning risks.
- Mentor junior engineers, document runbooks and playbooks, participate in PI planning, and improve team processes and tools.
- Coordinate with North American teams and maintain several hours of daily work overlap.
Requirements
- At least five years of related experience with a bachelor’s degree, or at least three years with a master’s degree, or equivalent work experience, including hands-on incident response.
- Hands-on experience securing at least one major cloud platform such as AWS, Azure, or GCP; multi-cloud experience is preferred.
- Experience with Wiz, CrowdStrike, SIEM platforms, and vulnerability scanners; Kubernetes and container security experience is strongly preferred.
- Strong understanding of firewalls, VPNs, authentication, certificates, intrusion detection, networking, cloud architecture, and common attack paths.
- Strong scripting and automation skills in Python, Go, Bash, or similar languages, including diagnostic scripts and security-tool API integrations.
- Experience using AI and LLM tools in security engineering and validating their outputs.
- Experience building AI-assisted workflows or agents using prompt engineering, MCP, or agent frameworks is strongly preferred.
- Ability to analyze complex problems methodically, maintain attention to detail, and communicate technical issues clearly across teams.
- Experience with SOAR platforms, automated response playbooks, or offensive security is a plus.
- Certifications such as OSCP, GCIH, GCIA, CISSP, or a cloud security specialty are a plus.
- Bachelor’s, master’s, or PhD in computer science, computer engineering, electrical engineering, electronics engineering, communication engineering, or a related field, or equivalent work experience.
Benefits
- Comprehensive health coverage, generous paid time off, and flexible work options.
- Learning opportunities, career-mobility programs, and leadership workshops.
- Sixteen paid volunteer hours annually, global employee resource groups, and a company No Jerks policy.
- Modern offices with EV charging, healthy snacks, hackathons, game nights, and culture celebrations.
- Charitable Giving Program with company matching.
- Bangalore, India location with a hybrid work arrangement and daily overlap with North American teams.
Tech Stack
Categories
About Infoblox
Infoblox provides DNS, DHCP, and IP address management (DDI) plus DNS security and network automation for large enterprises and service providers. The company sells software and cloud-managed services, with virtual and physical appliances and subscriptions that unify networking and security operations. Founded in 1999 and headquartered in Santa Clara, it is privately held by Vista Equity Partners, and its customers include Fortune 100 firms.