1 month ago
Chennai, IndiaSenior
Responsibilities
- Own escalated alerts and lead complex investigations across SIEM, identity and access, endpoint, and cloud environments.
- Perform log correlation, endpoint and network forensics, threat-intelligence enrichment, root-cause analysis, containment, eradication, and recovery.
- Lead Sev-0, Sev-1, and suspected-breach incident-response bridges while coordinating with engineering SMEs and stakeholders.
- Build and tune detections, conduct proactive threat hunting, and automate triage and response using SOAR playbooks and scripting.
- Preserve forensic evidence and chain of custody, meet response SLAs, and provide accurate incident updates.
- Lead post-incident reviews, corrective and preventive actions, detection hardening, and recurrence-reduction initiatives.
- Author runbooks and knowledge-base content, mentor Security Engineers and analysts, and lead onboarding knowledge transfer.
Requirements
- Bachelor-level degree in a relevant field such as B.E. or B.Tech, or equivalent qualification.
- 5–8 years of experience in security operations, incident response, or a SOC, including senior escalation and incident-response ownership.
- Deep hands-on expertise with SIEM, EDR, log analysis, and endpoint and network forensics.
- Strong knowledge of attacker techniques, threat intelligence, the MITRE ATT&CK framework, and the incident-response lifecycle.
- Proven experience leading complex investigations, containment and eradication, and root-cause analysis.
- Detection-engineering and automation experience with Python, SOAR playbooks, detection-as-code, and ITSM tooling.
- Strong written and verbal English communication skills for technical leadership, documentation, and mentoring.
- Ability to work a rotational 24x7 shift and on-call model, including nights, weekends, and holidays.
- Preferred: ITIL V4, GCIH, GCIA, GCFA, CySA+, or CISSP certification; familiarity with NIST and SANS frameworks.
- Preferred: experience with cloud security, container/workload security, GPU or high-density infrastructure, and 24x7 SOC or command-center environments.
Benefits
- Medical insurance stipend paid annually.
- Nine company-paid holidays.
- Generous leave policy, one-month paid sabbatical every five years, and an annual anniversary bonus.
- Professional development reimbursement.
- Internet reimbursement and fitness membership reimbursement.
- Company-paid Wellable subscription.
- Work is based in Vultr’s Global Integrated Operations Command Center in Chennai and follows a rotational 24x7 shift and on-call schedule, including nights, weekends, and holidays.
About Vultr
Vultr builds and operates a self-service cloud infrastructure platform offering Cloud Compute, Cloud GPU, Bare Metal, object storage, and managed Kubernetes for developers, startups, and enterprises. It runs in 33 data center locations worldwide and sells on-demand IaaS and GPU capacity, including AI infrastructure. Founded in 2014 and headquartered in West Palm Beach, Florida, Vultr is privately held and announced a private equity financing in 2024.