Principal Information Security Engineer

About the role

We are looking for a Principal Information Security Engineer to lead advanced security operations, threat detection, incident response, DLP, and enterprise security initiatives across our organization.

Key responsibilities

• Lead Tier‑2 SOC operations, including security monitoring, alert investigation, threat hunting, and incident response.
• Manage and optimize SIEM platforms such as Microsoft Sentinel and IBM QRadar.
• Administer the Microsoft Defender XDR ecosystem (Endpoint, Identity, Cloud, Office 365) and develop detection rules, dashboards, and use cases.
• Define DLP strategy, policies, incident investigation, governance, and reporting using Microsoft Purview and Forcepoint.
• Secure Azure and AWS environments, implement cloud security controls, and integrate security into DevSecOps pipelines.
• Perform vulnerability assessments, penetration testing, risk assessments, and lead forensic investigations and remediation.
• Manage security technologies including Imperva WAF, CyberArk PAM, Microsoft Intune, Fortinet, Forescout NAC, Zscaler, and Zero Trust solutions.
• Mentor SOC/DLP teams, collaborate with IT, DevOps, and business stakeholders, and support audits and compliance initiatives.

Required profile

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, or a related field.
• 6–10+ years of experience in cybersecurity, SOC, or information security with proven team leadership.
• Strong analytical, communication, and stakeholder management skills.

Required skills

• SIEM: Microsoft Sentinel, IBM QRadar
• Microsoft XDR/Defender Suite
• DLP: Microsoft Purview, Forcepoint
• Cloud security: Azure, AWS
• DevSecOps and CI/CD security integration
• Vulnerability Assessment & Penetration Testing (VAPT)
• Security tools: Imperva WAF, CyberArk PAM, Microsoft Intune, Fortinet, Forescout NAC, Zscaler, Zero Trust solutions
• Networking, Active Directory, Linux, threat intelligence, vulnerability management