3 STG Labs Jobs

Dodge Position Title: Senior Security Engineer
Location: Bangalore, India


Roles and Responsibilities

• Implement and optimize security tools such as SIEM, EDR, IDS/IPS Firewalls, and threat intelligence platforms to enhance threat detection and response.
• Configure and manage SIEM Indicators of Compromise (IoCs) to ensure accurate correlation, alerting, and detection of malicious activities.
• Continuously monitor and correlate network traffic, security alerts, and events to detect potential threats and anomalous activity.
• Follow incident response protocols, investigate security breaches, and work with internal teams to resolve vulnerabilities efficiently.
• Conduct regular security assessments, penetration tests, and vulnerability scans to identify risks and recommend improvements.
• Ensure the organization complies with relevant security standards, regulations, and best practices.
• Educate employees on cybersecurity best practices, phishing prevention, and safe internet usage to enhance the company’s security posture.
• Work closely with IT staff to ensure secure configurations, patch management, and adherence to cybersecurity policies.

Qualifications
Hands-on working knowledge and experience is required in:

• Windows, Linux (Ubuntu, CentOS, Red Hat), macOS
• Firewalls (Palo Alto, Cisco ASA, Fortinet)
• SIEM Technologies (ArcSight, Splunk, QRadar, LogRythm, Sentinel, Exabeam, Insight IDR)
• TCP/IP, DNS, VPNs, Zero Trust Networking, WPA3
• EDR/XDR/MDR (CrowdStrike, SentinelOne, Microsoft Defender ATP, Rapid7)
• Scripting (Python, PowerShell, Bash, SQL)
• Vulnerability Scanning (Nessus, Qualys)
• IDS/IPS/NSM (Snort, Suricata, Zeek, Security Onion)
• IAM Solutions (OAuth/SAML, Active Directory, AWS IAM)

AWS Security Certification, Operating System: Linux, SIEM: Splunk, EDR/XDR/MDR: CrowdStrike or Defender or Sentinel One, Vulnerability Scan: Qualys, Network Security,

Hands-on working knowledge and experience is preferred in:

• Penetration Testing Tools: Metasploit, Burp Suite, Nmap
• SDLC: SAST/DAST Experience
• Security Frameworks (NIST, ISO 27K1, CIS, SOC1/2)
• MITRE ATT&CK
• AWS Security Hub, Azure Security Center, Google Security Command Center
• Secrets Management (CyberArk Conjur, Hashicorp, AWS Secrets Mgr, Doppler)
• Encryption Tools: OpenSSL, BitLocker, VeraCrypt

Certifications Preferred:

• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+

Education and Years of Experience:

• At least 5 years of experience in cybersecurity, IT, or network administration