Senior Security Engineer

About the role

GXA is looking for a highly capable Senior Security Engineer to support the delivery and operation of its gShield security services. This hands‑on, technical role focuses on incident response, security tool operations, remediation execution, client security support, and internal security improvement initiatives.

Key responsibilities

• Serve as Tier 3 escalation point for active security incidents such as BEC, ransomware, and account compromise.
• Lead technical analysis during incident response and war‑room events, including log review, IOC hunting, and lateral movement tracing.
• Execute containment actions like endpoint isolation, session revocation, and credential resets.
• Operate daily within the gShield toolstack (Huntress, Microsoft Defender for Endpoint, Cyrisma, DNSFilter, SIEM, etc.).
• Perform alert triage, risk identification, scan issue resolution, and support SIEM query development and rule tuning.
• Coordinate with SOC, vendor threat‑intelligence teams, and internal leadership during investigations.
• Deliver technical remediation, vulnerability analysis, and quality‑assurance support for client onboarding.

Required profile

• Hands‑on experience in live security events and incident response.
• Strong analytical skills for reviewing logs, hunting IOCs, and tracing lateral movement.
• Ability to work collaboratively with InfoSec managers, vCISO, SOC, and onboarding teams.
• Execution‑focused mindset with a commitment to operational excellence.

Required skills

• Huntress
• Microsoft Defender for Endpoint (MDE)
• Cyrisma
• DNSFilter
• SIEM platforms
• Incident response and containment techniques
• Log analysis and IOC hunting
• Endpoint isolation and credential reset procedures
• Vulnerability analysis and remediation
• Alert triage and rule tuning