The company is hiring a Senior Security Engineer to own security across its hosted environment and managed services. This hands-on role covers defence, testing, hardening, audits and documentation, and is the top escalation point for security issues. Based in Noida.

The role

The company is hiring a Senior Security Engineer to be its in-house subject matter expert for security. You will own the security programme end to end, covering defence, offensive testing, hardening, audits and documentation. You will work with the IT manager, the infrastructure and identity specialists and the support teams, and you will be the top escalation point for security issues.

A typical day includes detection and response on CrowdStrike Falcon, leading incidents from containment to recovery and writing Root Cause Analysis reports. You will run vulnerability scans and internal penetration tests, define hardening baselines aligned to CIS benchmarks, and review Palo Alto firewall policy and VPN security. You will also mentor engineers and prepare security documentation. AI tools are part of the daily toolkit.

We are looking for hands-on experience in information security, with at least two years in security operations or incident response at a managed service provider, hosting provider or regulated business. You should have strong skills in endpoint detection, log analysis, threat hunting and incident handling in Windows and Active Directory environments. Working knowledge of firewall segmentation, Microsoft 365 security, SOC 2 and the FTC Safeguards Rule is needed. Full professional fluency in written and spoken English is required. Useful extras include OSCP, CISSP or GIAC credentials, Python or PowerShell scripting, and experience with Veeam or Duo.

The experience band is 4 to 12 years. The role is full-time and on-site in Noida, on a night shift covering United States business hours. The notice period should be up to 60 days.

To apply, sign in on hyperwrk.com and apply in one step. A recruiter at Albireo Recruiters reads every application.

Must have

Endpoint Detection and Response (EDR)
incident handling in Windows and Active Directory environments
log analysis, threat hunting
Active Directory attack paths
vulnerability scanning, penetration testing methods
firewall policy and segmentation
CIS-based hardening
Microsoft 365 security controls
frameworks such as SOC 2 and the FTC Safeguards Rule

Nice to have

OSCP, CISSP, or GIAC incident handling credentials
Scripting in PowerShell or Python for security automation
Duo, Veeam, and Microsoft Defender for Office 365

What happens after you apply

The recruiter working this role reads your application. If it fits, they call you before anything is shared with the company. You see every stage in your account, in plain words.