Back
Tier-2 brand, mid-level generalist security role in Bangalore with broad skill requirements.
Security skills are broadly transferable across industries despite some healthcare regulatory preference.
Explicit 5–7 years plus specific AWS, SIEM, and EDR experience required.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Own the end-to-end investigation and response of AWS cloud security incidents using tools like GuardDuty, Security Hub, CloudTrail, and IAM management.
Manage SIEM monitoring and detection tuning primarily on Microsoft Sentinel to enhance threat detection and reduce false positives across multiple data sources.
Lead EDR/XDR endpoint investigations and coordinate containment and remediation efforts; support AI security incident detection, risk monitoring, and secure AI operations.
5–7 years of experience in SOC operations, incident response, cloud security, SIEM engineering, or EDR/XDR operations.
Hands-on expertise with AWS security services (GuardDuty, Security Hub, CloudTrail, Config, Inspector, IAM, CloudWatch) and incident investigation.
Experience with Microsoft Sentinel SIEM including alert investigation, KQL querying, and rule tuning.
Experience with EDR/XDR tools (preferably Microsoft Defender XDR) for endpoint investigation and remediation.
Proven ability to work collaboratively with SOC, Cloud Engineering, Infrastructure, Identity, and Application teams to improve security posture and incident handling.
Demonstrated skills in scripting or query languages such as KQL, PowerShell, or Python to enable automation and operational improvements.
Experienced in supporting secure adoption and monitoring of AI technologies and mitigation of AI-related security risks.