Senior Security Engineer,GIOC

Who We Are Vultr is on a mission to make high-performance cloud infrastructure easy to use, affordable, and locally accessible for enterprises and AI innovators around the world. With 33 global cloud data center locations, Vultr is trusted by hundreds of thousands of active customers across 185 countries for its flexible, scalable, global Cloud Compute, Cloud GPU, Bare Metal, and Cloud Storage solutions. In December 2024 Vultr announced an equity financing at a $3.5 billion valuation. Founded by David Aninowsky and self-funded for over a decade, Vultr has grown to become the world’s largest privately-held cloud infrastructure company. Vultr Cares Medical Insurance stipend paid annually 9 Company-Paid Holidays Generous Leave Policy + 1 month paid sabbatical every 5 years + Anniversary Bonus each year Professional Development Reimbursement Internet reimbursement Fitness membership reimbursement Company paid Wellable subscription Join Vultr Vultr is expanding its India presence and is building its first Global Integrated Operations Command Center (GIOC) in Chennai — the 24x7 nerve center for monitoring, triage, and incident resolution across Vultr’s global security operations. We are seeking Senior Security Engineers to own escalated investigations and lead incident response across Vultr’s security surface — SIEM, threat detection, identity and access, and endpoint/cloud telemetry. This is a deep-dive role for experienced security operators who lead investigations, threat hunting, and forensics, drive detection engineering, and mentor Security Engineers — and who want to grow toward incident response, threat-detection, or security engineering leadership. You must be comfortable with a rotational shift and on-call model — including nights, weekends, and holidays — to sustain follow-the-sun coverage. Role Overview The Senior Security Engineer owns alerts escalated from Security Engineer and leads investigation on the most complex security events. You perform deep analysis, drive incidents to resolution within defined SLAs, determine root cause and scope, contain and eradicate threats, and deliver detections and fixes that prevent recurrence. The role ensures deep technical investigation and platform security that protects customer data and platform integrity. You act as a senior escalation point and security subject-matter expert, leading incident-response bridges, partnering with Secops/Engineering SMEs on remediation, and raising the team’s capability through detections, runbooks, and mentoring. Success is measured by MTTR/MTTC, investigation quality, recurrence reduction, and detection coverage. The role runs on a rotational shift and on-call schedule to sustain 24x7 coverage. Key Responsibilities Escalated Investigation & Incident Response Own alerts escalated from Security Engineers across SIEM, identity/access, endpoint, and cloud, and drive investigations to closure Lead deep analysis using log correlation, endpoint and network forensics, and threat-intelligence enrichment Meet response SLA targets and provide regular, accurate updates throughout the incident lifecycle Containment, Eradication & Root Cause Determine scope, root cause, and attacker activity; distinguish true positives from benign anomalies Drive containment, eradication, and recovery actions, and implement hardening to close the attack path Partner with L3 / Engineering SMEs on remediation and with stakeholders on disclosure and compliance obligations Preserve forensic evidence and maintain chain-of-custody throughout the investigation Major Incident Response & Technical Leadership Act as technical lead on major-incident (Sev-0 / Sev-1) and suspected-breach bridges, coordinating across towers Make and document containment and recovery decisions under pressure, balancing risk and availability Serve as senior escalation point and security subject-matter expert for the GIOC Detection Engineering, Threat Hunting & Automation Build and tune detections and correlat