Senior Security Operations Engineer

About this job

Everpure, a major data platform company closing fiscal 2026 with billions in revenue, is seeking a Senior Security Operations Engineer focused on Attack Surface Management in its Bangalore office. In this role, you will help engineer, operate, and continuously improve enterprise attack surface and vulnerability management systems. The company engages in shaping the next generation of technology, partnering with AI labs, hyperscalers, and the broader AI ecosystem. A normal day in this position involves discovering and understanding the corporate attack surface, identifying vulnerabilities and exposures, prioritizing them according to real-world risks, and driving remediation across a global environment. You will work across domains such as Zero Trust, secrets security, detection engineering, and security automation. You will regularly collaborate with cloud, infrastructure, and engineering teams to investigate exposures, build automated workflows using Python or PowerShell, and translate technical findings into actionable risk guidance for leadership.

Responsibilities

• Engineer and improve enterprise Attack Surface and Vulnerability Management across diverse environments.
• Discover and correlate assets to identify unknown, unmanaged, stale, and externally exposed assets.
• Drive risk-based vulnerability prioritization using threat intelligence, exposure, and exploitability data.
• Operate and troubleshoot Zscaler ZIA/ZPA and Zero Trust controls.
• Investigate exposed secrets and credentials and coordinate remediation and credential rotation.
• Develop SIEM detections and support threat hunting and incident investigations.
• Create automation scripts using Python, PowerShell, REST APIs, and SOAR platforms.
• Partner with internal engineering teams to translate technical findings into clear risk guidance.

Requirements

• 7+ years of cybersecurity experience with hands-on practice in Security Operations or Vulnerability Management.
• Strong understanding of asset discovery, vulnerability lifecycle, and risk-based prioritization.
• Hands-on experience with platforms like Tenable, Qualys, Wiz, or Prisma Cloud.
• Solid fundamentals in TCP/IP, DNS, HTTP/HTTPS, TLS, firewalls, and cloud infrastructure.
• Experience automating security workflows using Python, PowerShell, or REST APIs.
• Strong troubleshooting and analytical skills to independently investigate complex problems.
• Ability to influence and collaborate with engineering teams to drive risk reduction.

Good to have

• Experience with Zscaler ZIA/ZPA/ZDeception and Zero Trust
• Familiarity with secrets discovery tools like GitGuardian, Gitleaks, or TruffleHog
• Detection engineering experience using Splunk
• Cloud security experience across AWS, Azure, or GCP
• Relevant certifications such as CISSP, CISM, GIAC, or cloud security credentials

Who should apply

This role suits experienced cybersecurity professionals with a strong background in vulnerability management, attack surface discovery, and security automation. Applicants must possess at least seven years of relevant industry experience, making this position unsuitable for freshers. Candidates should have a deep technical foundation in networking, cloud infrastructure, and risk prioritization, along with the ability to collaborate effectively with cross-functional engineering teams in an in-office environment based in Bangalore.

Frequently asked questions