Security Engineer, GIOC

About the role

The Security Engineer is the entry point of the GIOC incident lifecycle for the security tower. You monitor security signals, acknowledge and triage alerts within defined first-response SLAs, execute documented runbooks to investigate and contain common security events, and escalate cleanly to Senior Security when an alert falls outside L1 scope.

What you'll do

• Alert Monitoring & First Response
• Monitor security signals — SIEM detections, authentication and access anomalies, threat-intel and endpoint alerts — from a consolidated single-pane-of-glass dashboard
• Acknowledge alerts and incidents within first-response SLA targets
• Perform initial review — validate the detection, rule out false positives, check recent changes, and review the CMDB before acting
• Triage & Severity Classification

What you need

• 3–5 yrs of experience
• SIEM
• Incident response
• B.Tech or B.E.

Good to have

• Cloud security
• Python
• ITIL
• JIRA
• Bash
• PowerShell