Principal Information Security Engineer

We are looking for a seasoned Principal Information Security Engineer to spearhead advanced security operations, threat detection, incident response, data loss prevention (DLP), and enterprise-wide security initiatives. The successful candidate will bring deep expertise in Security Operations Center (SOC) management, Security Information and Event Management (SIEM), Microsoft Extended Detection and Response (XDR), cloud security, and DevSecOps practices. Proven experience in leading security teams and collaborating across IT and business units is essential.

Key Responsibilities

Lead Tier-2 SOC operations including security monitoring, alert investigation, threat hunting, and incident response activities. Manage and optimize SIEM platforms such as Microsoft Sentinel and IBM QRadar to enhance threat detection capabilities. Administer and continuously improve the Microsoft Defender XDR ecosystem, covering Defender for Endpoint, Identity, Cloud, and Office 365 components. Develop and fine-tune detection rules, correlation logic, dashboards, and security use cases to strengthen monitoring effectiveness.

Drive the DLP strategy by developing policies, investigating incidents, ensuring governance, and generating reports using tools like Microsoft Purview and Forcepoint. Monitor and secure cloud environments on Azure and AWS, implementing robust cloud security controls. Integrate security practices into DevSecOps and CI/CD pipelines, including conducting code reviews and vulnerability assessments.

Conduct Vulnerability Assessment and Penetration Testing (VAPT) and perform comprehensive risk assessments. Manage a broad range of security technologies such as Imperva Web Application Firewall (WAF), CyberArk Privileged Access Management (PAM), Microsoft Intune, Fortinet, Forescout Network Access Control (NAC), Zscaler, and Zero Trust solutions. Lead root cause analysis, forensic investigations, remediation efforts, and continuous security improvements.

Mentor SOC and DLP teams while collaborating closely with IT, DevOps, and business stakeholders to align security initiatives. Support audits, compliance programs, vendor management, and evaluate emerging security technologies.

Required Qualifications

Bachelor’s or Master’s degree in Cybersecurity, Information Security, or a related discipline. A minimum of 6 to 10+ years of experience in cybersecurity, SOC operations, or information security roles. Strong hands-on expertise with SIEM platforms, specifically Microsoft Sentinel and IBM QRadar. Proficient in Microsoft XDR and Defender Suite administration.

Experience with DLP solutions such as Microsoft Purview and Forcepoint is essential. Solid knowledge of cloud security on Azure and AWS platforms. Familiarity with DevSecOps principles and securing CI/CD pipelines. Skilled in incident response, threat hunting, and digital forensics.

Practical experience managing security technologies including WAF, PAM, Endpoint Detection and Response (EDR/XDR), firewalls, NAC, and Zero Trust architectures. A strong understanding of networking fundamentals, Active Directory, Linux environments, threat intelligence, and vulnerability management is required. Excellent leadership, analytical thinking, communication, and stakeholder management skills are critical for success.

Preferred Qualifications

Certifications such as Certified Ethical Hacker (CEH), Computer Hacking Forensic Investigator (CHFI), Microsoft Azure Administrator (AZ-104), ISO/IEC 27001, SOC Analyst Certification (e.g., LetsDefend or equivalent), and Forcepoint or other DLP/security certifications are highly desirable.

Key Competencies

SOC Leadership, Incident Response, Threat Hunting, SIEM/XDR, DLP, Cloud Security, DevSecOps, Vulnerability Assessment and Penetration Testing (VAPT), Risk Management, and Team Leadership.

This role offers the opportunity to lead critical security functions within a dynamic environment, driving innovation and resilience across the enterprise’s security posture.