Staff Security Operations Engineer

About this job

Everpure, a recognized data platform and storage pioneer with billions in revenue, is looking for a Staff Security Operations Engineer for its Bangalore office. In this hands-on position, you will own, build, and mature crucial security capabilities, including Attack Surface Management, Vulnerability Management, Zero Trust, credential security, detection engineering, and security automation. You will work closely with global security teams and GISO leadership to turn security strategies into measurable actions. A typical day involves driving risk-based vulnerability prioritization, building operating processes and remediation SLAs, creating automation solutions using scripting and SOAR, and partnering with engineering, cloud, and product groups to fix security gaps and reduce enterprise risk.

Responsibilities

• Lead and mature enterprise Attack Surface and Vulnerability Management operations across cloud, endpoint, and infrastructure environments.
• Implement risk-based vulnerability prioritization utilizing asset exposure, threat intelligence, and criticality.
• Define remediation SLAs, operating processes, governance frameworks, and security dashboards.
• Deliver technical leadership covering Zero Trust, secrets security, SIEM, EDR, and security automation.
• Build automation and integrations through APIs and SOAR tools to boost operational efficiency.
• Collaborate with Engineering, Cloud, and Product Security teams to establish ownership and fix security exposures.

Requirements

• 8+ years of cybersecurity experience focusing on security operations, vulnerability management, or engineering.
• Demonstrated experience building or improving an enterprise attack surface or vulnerability management program.
• Technical familiarity with platforms like Tenable, Qualys, Wiz, Prisma Cloud, Zscaler, CrowdStrike, or Splunk.
• Experience utilizing security automation, REST APIs, scripting, and SOAR tools.
• Strong security fundamentals spanning networking, cloud, endpoints, identity, and Zero Trust.
• Proven ability to define operational metrics, SLAs, and KPIs to drive measurable risk reduction.
• Strong stakeholder management and communication skills to influence engineering and business leaders.

Good to have

• Experience with Zscaler ZIA/ZPA/ZDeception and Zero Trust architectures.
• Familiarity with secrets discovery tools such as GitGuardian, Gitleaks, or TruffleHog.
• Background in SIEM, detection engineering, threat hunting, and incident response using Splunk or similar.
• Cloud security expertise across AWS, Azure, or GCP.
• Relevant certifications like CISSP, CISM, GIAC, or vendor-specific cloud and Zscaler credentials.

Who should apply

This role suits experienced cybersecurity professionals with a strong background in security operations, vulnerability management, and engineering who excel at stakeholder management and driving remediation. Candidates must have extensive industry experience and possess hands-on technical skills in modern security tools and automation. Freshers cannot apply as the position requires at least 8 years of relevant cybersecurity experience.

Frequently asked questions