4 days ago
Pune, India or Bengaluru, IndiaStaff+
Responsibilities
- Design and deliver Active Directory protection features such as granular change tracking, object and attribute recovery, forest-aware backup, and full forest recovery.
- Build and own a signed, serviceable, silently upgradeable Windows agent running on domain controllers.
- Design identity threat detection using change-delta engines, privileged-object and ACL-abuse rules, and audit-log and SIEM findings pipelines.
- Ensure safe write and restore paths through idempotency, USN-rollback safety, and pre-flight validation before destructive actions.
- Perform threat modeling, architecture reviews, attack-surface reduction, and vulnerability remediation.
- Develop code and test automation, including automated recovery drills and fidelity validation.
- Lead projects, mentor engineers, and strengthen Windows and Active Directory expertise across the team.
Requirements
- B.S., M.S., or Ph.D. in Computer Science, Electrical Engineering, or a related field.
- 10+ years of software design and development experience, including significant Windows-platform software experience.
- 5+ years of experience building software for Active Directory internals, including reading, writing, replicating, backing up, or recovering directory data.
- 3+ years of security-focused experience in areas such as identity security, detection engineering, security architecture, or product security.
- Experience shipping agent or systems software onto customer-managed production infrastructure.
- Expertise in Windows internals, Windows security, agent development, VSS writers and shadow copy APIs, serviceability, transport, debugging, PowerShell, and Active Directory internals.
- Experience with AD security and ITDR, including Kerberos, NTLM, DCSync, DCShadow, ACL abuse, privileged group manipulation, detection engineering, cyber recovery, and SIEM integration.
- Knowledge of distributed systems, durable state machines, idempotency, crash recovery, long-running orchestration, and infrastructure software test automation.
- Ability to lead initiatives, mentor engineers, explain directory-level failure modes, and exercise sound judgment during recovery operations.
- Preferred qualifications include commercial AD backup, recovery, or ITDR experience; real forest recovery experience; DSInternals, BloodHound, or PingCastle experience; Entra ID and Entra Connect experience; Windows kernel or filter-driver work; EDR allowlisting; air-gapped or regulated-environment experience; published security work or CVE credits; Red/Blue Team experience; and OSCP or GCFA certification.
Benefits
- Position is located in the Cohesity office in Bangalore or Pune, India.
- Employees within a reasonable commute are expected to work from core offices 2–3 days per week of their choosing.
- Candidates outside the designated area should be committed to relocating before their start date and have the legal right to work in the job location.
About Cohesity
Cohesity builds enterprise data security and management software that provides backup, disaster recovery, ransomware recovery, and data governance across data centers and public clouds. Its Cohesity Data Cloud is sold as subscription software, on integrated appliances, and as cloud services to large enterprises and public-sector customers. Privately held and headquartered in Santa Clara, California, Cohesity was founded in 2013 and focuses on cyber recovery and securing data at scale.