Security Engineer

Security Engineer

Talanos Cybersecurity | Based within ~200km of Delhi or Bangalore (hybrid/remote within that radius) | Full time, permanent

Talanos Cybersecurity delivers managed SOC, identity governance, third-party risk management, dark web intelligence, continuous autonomous pentesting and security advisory services to mid-market and regulated organisations across the UK, Europe, South Africa, Botswana and India. We are CREST SOC accredited and certified to ISO 27001 and ISO 9001.

Security monitoring only works if the engineering underneath it is sound. This role owns the platform layer our SOC depends on: SIEM deployments, integrations, log pipelines, and cloud security configuration. You’ll report directly to the CTO.

What you’ll be doing

• Deploy and configure SIEM platforms for new customer environments, from initial build through to a production service
• Design and build integrations between customer systems and the SIEM — EDR, firewalls, cloud platforms, identity providers, email security, servers, applications and SaaS
• Build and maintain log collectors, forwarders, agents and API-based connectors, and troubleshoot them when they fail quietly
• Manage onboarding of new log sources end to end, and maintain ingestion health across all customers
• Configure and harden cloud environments (Azure, Microsoft 365, AWS, GCP) — identity and access, logging and audit, network controls
• Run vulnerability and patch compliance scans and manage automated patch deployment (e.g. Qualys, Tenable, Rapid7, Intune, SCCM), including deployment rings, scheduling and failure handling
• Document what you build and contribute to a reusable library of integration and configuration patterns

What you’ll need

• 4+ years in cybersecurity or security engineering, with meaningful hands-on experience in a SOC, MSSP or managed security environment
• Practical, hands-on experience deploying, configuring and maintaining at least one enterprise SIEM — we care that you’ve built and run one, not only used one
• Demonstrable experience integrating log sources into a SIEM, including troubleshooting connectivity, parsing and data quality
• Hands-on cloud security configuration experience on at least one major platform (Azure, AWS or GCP)
• Practical experience with patch and vulnerability management — running scans, prioritising results, and deploying patches through an automated platform

You don’t need every item below, but most of these should describe you:

• Scripting ability in Python, PowerShell or Bash
• Comfort with APIs, authentication flows and everyday networking
• A security mindset — you think about what an attacker would do and verify your data is actually complete, not just that a dashboard looks green
• Clear written and spoken English, and comfort working with UK and South Africa based colleagues

What we offer

• Real breadth — multiple customers, sectors and SIEM/cloud platforms
• A funded training and certification budget
• Standard business hours, with deliberate overlap into the UK working day (roughly until 7–8pm IST) — no shift work, no on-call
• Direct working relationship with the CTO and senior engineers, in a team small enough that your work is visible

Pay: ₹1,000,000.00 - ₹1,600,000.00 per year

Benefits:

• Paid sick time
• Paid time off
• Work from home

Application Question(s):

• How many years of hands-on experience do you have in cybersecurity or security engineering?
• Which SIEM platforms have you personally deployed, configured or administered? (Select all that apply: Microsoft Sentinel / Splunk / IBM QRadar / Elastic Security / LevelBlue (AlienVault) / Google SecOps / Sumo Logic / Other / None)
• Have you built and troubleshot log source integrations into a SIEM — connectors, forwarders, agents, parsers or API-based ingestion? (Yes/No)
• Which cloud platforms have you worked on in a security configuration capacity, rather than general administration? (Select all that apply: Azure / Microsoft 365 / AWS / GCP / None)
• Have you run patch management using an automated deployment platform — for example Qualys, Tenable, Rapid7, Microsoft Intune, SCCM or Automox? (Yes/No)
• Briefly describe your patch management experience: which platform, roughly how many endpoints, and what you were responsible for.
• Which scripting languages do you use regularly for automation? (Select all that apply: Python / PowerShell / Bash / KQL or SPL / None)
• Have you worked in an MSSP, MDR or managed services environment, supporting multiple customers at once? (Yes/No)
• This role works standard business hours with deliberate overlap into the UK working day (roughly until 7–8pm IST), with no shift work or on-call. Are you comfortable with this? (Yes/No)
• What is your notice period, in days?

Work Location: Remote