Senior, Security Engineer- Infrastructure & Automation

Scale Computing

8d•Onsite

About The Position

Scale Computing is a global leader in edge computing, hyperconverged infrastructure, and managed networking solutions. We deliver innovative, secure, and scalable technology that powers critical operations worldwide. Role Overview We are seeking a Security Engineer to join our growing security team, based in our Bengaluru office. This role is hands-on and technically focused — you will deploy, configure, and automate security tooling across our hyperscaler and on-premises infrastructure, working directly with the CISO to drive technical security initiatives. This is not a GRC, compliance, or analyst role. We are looking for an engineer who has built and configured security systems from the ground up — someone who has written scripts to automate controls, tuned detection rules, and gotten their hands dirty in cloud security consoles and infrastructure tooling. If your security experience is primarily policy-writing, audit support, or being a user of vendor dashboards, this role is not the right fit.

Requirements

4–7 years in a hands-on security engineering or security operations engineering role
Demonstrated experience building or configuring security tooling — not just operating vendor dashboards
Hands-on experience in at least one cloud environment (AWS or Azure) with native security services
Scripting proficiency: Python and/or Bash required; PowerShell a plus
Hands-on SIEM experience: Elastic Security, Splunk, Microsoft Sentinel, or equivalent — detection rule development, not just querying
Experience with vulnerability management tooling (Tenable, Qualys, Rapid7, or equivalent) at an administrative/configuration level
Strong written and verbal English communication skills
Cloud: AWS (Security Hub, GuardDuty, IAM, CloudTrail, Config) or Azure (Defender for Cloud, Sentinel, Entra ID, NSGs)
SIEM: Detection engineering, log source onboarding, parser/pipeline development
Scripting: Python and/or Bash — automation, API integration, tool-building
Endpoint security: EDR/XDR administrative configuration and alert tuning
Network security: Firewall policy review, IDS/IPS tuning, network traffic analysis
IaC: Terraform or Ansible at a review and hardening level (greenfield dev is a plus, not required)

Nice To Haves

GIAC certifications: GCIH, GCIA, GCED, GDAT, or GREM
AWS Certified Security – Specialty
Microsoft SC-200 (Security Operations Analyst)
CompTIA CySA+ (baseline acceptable; not a differentiator on its own)
Practical, portfolio-backed experience — home labs, CTF competition results, open-source tool contributions — will be weighted alongside or above certifications.

Responsibilities

Deploy, configure, and maintain security tools across AWS, Azure, and on-premises environments
Implement and manage SIEM platforms — log ingestion pipelines, parser development, and correlation rule authoring
Configure and tune EDR/XDR platforms, vulnerability scanners, and network security tools
Integrate security tooling with infrastructure via APIs and native connectors
Own tool lifecycle: initial deployment, hardening, health monitoring, and version upgrades
Build automation for security controls using Python, Bash, and/or PowerShell
Develop and maintain detection rules, alerting logic, and correlation content
Automate routine SecOps tasks: triage workflows, data enrichment, response actions
Reduce alert fatigue through systematic tuning, suppression rules, and threshold calibration
Build integrations between security tools and ticketing/ITSM systems (Jira, ServiceNow, or equivalent)
Implement and monitor cloud-native security controls: AWS Security Hub, GuardDuty, IAM; Azure Defender, Sentinel, Entra ID
Apply and validate CIS benchmarks and hardening baselines across servers and endpoints
Review and harden Infrastructure as Code configurations (Terraform, Ansible)
Monitor network traffic and enforce segmentation policies
Contribute to container and Kubernetes security posture: image scanning, admission control, runtime monitoring
Develop detection content mapped to MITRE ATT&CK
Build and maintain runbooks for alert investigation and structured response
Participate in incident response activities as a technical contributor
Conduct threat hunting exercises using available telemetry
Support purple team exercises and security tabletops
Translate CISO direction into working technical implementations
Document architecture decisions, tool configurations, and automation workflows
Surface tooling gaps and propose solutions with clear tradeoff analysis
Communicate technical findings clearly to non-technical stakeholders when needed