Security Engineer

Role & responsibility

Mandatory Skills

• 5+ years of hands-on experience in Security Engineering, Cloud Engineering, Infrastructure Security, or related cybersecurity roles.

• Strong experience in at least two of the following:

• Cloud Security (AWS/Azure/GCP)

• Infrastructure Security

• Application Security / DevSecOps

• Data Protection

• Experience with SIEM, SOAR, and SOC operations.

• Hands-on experience with EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, etc.).

• Experience implementing security controls in cloud-native and hybrid environments.

• Knowledge of CI/CD security and DevSecOps practices.

• Experience integrating security tools into engineering pipelines.

Technical Skills

• SIEM: Splunk, Microsoft Sentinel, QRadar, Elastic SIEM, ArcSight.
• SOAR: Cortex XSOAR, Splunk SOAR, Microsoft Sentinel Automation.
• Cloud Security: AWS Security Hub, GuardDuty, Azure Defender, IAM, CSPM.
• Infrastructure Security: Firewalls, IDS/IPS, PAM, Vulnerability Management.
• DevSecOps: SAST, DAST, SCA, Secret Scanning, Container Security.
• Automation using Python, PowerShell, Bash, or similar scripting.
• Infrastructure as Code (Terraform, CloudFormation, ARM, Bicep, Ansible).
• Logging, monitoring, and telemetry integration.

Preferred Experience

• Security architecture risk assessments.
• Security baseline implementation and system hardening (CIS Benchmarks, NIST).
• Security engineering documentation, runbooks, and operational procedures.
• Global enterprise security deployments.
• Collaboration with SOC, Cyber Defense, Infrastructure, and Regional IT teams.

Preferred Certifications

• CISSP
• CCSP
• Security+
• GIAC certifications
• AWS Security Specialty
• Azure Security Engineer Associate (AZ-500)
• Microsoft SC-200 / SC-300
• GSEC

Soft Skills

• Strong troubleshooting and implementation skills.
• Builder mindset with hands-on engineering capability.
• Good documentation and communication skills.
• Ability to prioritize work based on security risk and business impact.

Must-Have Keywords for Resume Search

SIEM, SOAR, SOC, EDR, XDR, Microsoft Sentinel, Splunk, QRadar, Cortex XSOAR, CrowdStrike, Microsoft Defender, Cloud Security, AWS Security, Azure Security, DevSecOps, Application Security, Infrastructure Security, IAM, Vulnerability Management, SAST, DAST, SCA, Terraform, Ansible, Python, PowerShell, Bash, CIS Benchmark, NIST, Security Engineering, Security Controls, Security Automation

Good Fit Profiles

• Security Engineer
• Cloud Security Engineer
• Cyber Security Engineer
• Security Platform Engineer
• DevSecOps Engineer
• Infrastructure Security Engineer
• Detection & Response Engineer
• Security Automation Engineer
• Security Operations Engineer

Red Flags (Reject)

• Only SOC monitoring/L1 analyst experience with no implementation work.
• Pure Network Security roles without cloud or security engineering exposure.
• Compliance/GRC-only profiles.
• Penetration Testing-only profiles.
• Less than 5 years of hands-on security engineering experience.
• No experience with SIEM/SOAR or cloud security implementations.

Preferred candidate profile