Lead Security Engineer, Information Security
Cvent View all jobs
- Gurgaon, Haryana
- Permanent
- Full-time
agile in security today requires a combination of development, system engineering, and investigative skills.
That’s where you come in! You are passionate about security. You are at home with incident investigation
analysis, but not afraid to dive into the engineering side of things to create or optimize solutions to make
incident response easier. You are familiar with Cyber Threat Intelligence (CTI) and threat hunting, and their
roles in incident response, monitoring, and detection. Finally, you look to be a technical leader and mentor to
other security engineers.
This position at Cvent is a technical, hands-on role that involves investigating and responding to information
security incidents, with a focus on intelligence driven incident response. The role will also include supporting
engineering efforts that facilitate incident handling. This may include work in SIEMs, SOAR platforms, EDR
solutions, and Threat Intelligence Platforms (TIPs). A prime focus of the work will be on efficient Incident
Response in dynamic cloud environments. You should also be able to adapt quickly and find creative ways to
implement solutions in a fast-paced and high-profile technology landscape. You will work with the latest
security tools, systems, and network technologies. A thirst for knowledge, a firm team-based mindset, a
curious mind, and the desire to continuously stay abreast of new developments in the dynamic security space
is a must.
In This Role, You Will:Position Duties: Conduct and manage security incident investigations for both corporate and product environments
Perform and lead Tier 2 and 3 responsibilities in support of Security Operations and Incident
Response
Mentor junior personnel in incident handling and investigations
Help keep incident response plans, runbooks, and other business processes current
Coordinate incident management functions between the Security Engineering and Operations Team,
Technology resource stakeholders, and other internal support organizations (i.e. SRE, Legal,
Networking), ensuring security is appropriately leading security incident handling
Assist with optimizing and auditing threat detection capabilities and SIEM content development in
support of incident detection and investigation capabilities
Identify and plan automated incident response solutions in SOAR platforms or via other AWS native
solutions
Work with other Security and Technology personnel to ensure that Threat Intelligence is well
integrated into the Incident Response process
Track and report on security incident investigations
Assist with the management and operations of incident response supporting platforms as needed
Stay abreast of emerging technologies related to Cloud Security
Engage in proactive Threat Hunting activities
Contribute strategically to the technological direction of the team and its programs.
Here's What You Need:Candidate Requirements: 8+ years of experience in security engineering, security operations, or security incident response
Bachelor’s Degree in Computer Science or related degree
Solid familiarity with scripting in support of digital forensics and incident response, including the
integration of various security tools
Familiarity with incorporating cyber threat intelligence into incident response
Experience investigating security incidents in AWS Cloud Some experience with the AWS platform and services such as Config, Security Hub, Lambda, CloudWatch, CloudTrail, S3, WAF, Guard Duty, Shield
Ability to adapt to a hyper-growth pace and changing priorities
Excellent problem solving and analytical skills; outstanding oral and written communication skills
Familiarity with common classes of security tools: SIEM, DLP, WAF, NGAV, and Vulnerability Scanners
Self-motivation and the ability to work under minimal supervisionPreferred Qualifications: Knowledge of high traffic and other cloud-based infrastructures and how they affect security needs
(i.e. cloud infrastructure, AWS, Serverless SOA architectures) would be a plus
Proficiency in Python or Java languages
Proficiency with leading digital forensic tools, such as Magnet, Autopsy/the Sleuth Kit, volatility