Senior InfoSec Engineer

Job Description

Job Description – InfoSec Engineer (SOC Operations & Incident Response)
Cybersecurity / Information Security
Full-time

1. Job Overview
Detail Information
Company Synamedia
Job Title InfoSec Engineer
Job ID Job_1036
Department 80081 – Protective Security
Location Bangalore, India
Employment Type Employee – Regular
Experience 5+ years
Work Arrangement Flexible working arrangements; exact office/hybrid policy not specified
Updated Date 21 October 2026
Salary Not disclosed

2. About the Company
Synamedia is a global media technology company with over 1,700 employees across 20 countries. It develops media cloud services, live streaming, video distribution, advertising technology and cloud platforms.

Its solutions support major customers including Disney, NBA, The Olympics, Astro, Comcast and Tata Play.
3. Job Summary
Synamedia is looking for an experienced InfoSec Engineer to manage Security Operations Centre (SOC) deliverables and support broader information security services.

The role involves second-level escalation support for a managed SOC provider, security incident investigation, threat hunting, detection engineering, vulnerability management and security compliance.

The ideal candidate should have strong hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID and Kusto Query Language (KQL), along with practical knowledge of threat detection and incident response.
4. Key Responsibilities
A. Microsoft Sentinel & SOC Operations
– Provide second-level escalation support to the outsourced Managed Services SOC.
– Review, validate, prioritise and investigate security alerts and incidents.
– Manage incidents through escalation, containment support, resolution and closure.
– Maintain investigation records, evidence and incident documentation.
– Improve Microsoft Sentinel analytic rules, automation rules, playbooks, workbooks and watchlists.
– Monitor log ingestion and data connector health.
– Coordinate with internal teams and managed SOC providers to ensure timely incident handling.
B. Threat Hunting & Detection Engineering
– Conduct proactive threat hunting across identity, endpoint, cloud, network and application environments.
– Use KQL to investigate security telemetry and identify suspicious activities.
– Develop threat-hunting hypotheses and validate indicators of compromise.
– Improve detection rules and reduce false positives.
– Use threat intelligence to identify emerging cyber threats, exposed credentials, malicious infrastructure and look-alike domains.
C. Incident Response
– Investigate phishing, malware, credential compromise, suspicious authentication and data exposure incidents.
– Support incident containment, eradication and recovery.
– Coordinate with technical and business stakeholders during security incidents.
– Conduct root-cause analysis and prepare incident reports.
– Develop response playbooks and operational runbooks.
– Participate in incident response exercises and readiness improvements.
D. Broader Information Security Services
– Support vulnerability assessment, risk prioritisation and remediation tracking.
– Coordinate vulnerability remediation with relevant technology teams.
– Assist with internal and external security audits.
– Collect audit evidence and validate security controls.
– Support third-party security reviews and security assessments.
– Contribute to risk-reduction initiatives and security advisories.
– Prepare SOC, incident, detection and vulnerability management reports and metrics.
5. Mandatory Technical Skills
Skill Area Required Skills
SIEM / SOC Microsoft Sentinel, SIEM operations, SOC escalation
Endpoint Security Microsoft Defender XDR, endpoint investigations
Identity Security Microsoft Entra ID
Cloud Security Azure security services and security telemetry
Query Language Strong Kusto Query Language (KQL)
Threat Management Threat hunting, threat intelligence, detection engineering
Incident Response Investigation, containment, eradication and recovery
Vulnerability Management Risk assessment, prioritisation and remediation coordination
Reporting Incident documentation, investigation reports and security metrics

6. Required Experience & Candidate Profile
– Minimum 5 years of experience in a Security Operations Centre (SOC), cyber incident response or a closely related security operations role.
– Hands-on experience investigating incidents using Microsoft Sentinel and Microsoft Defender XDR.
– Practical knowledge of Microsoft Entra ID and Azure security telemetry.
– Strong KQL skills for security investigations, threat hunting, dashboards and detection development.
– Experience in SIEM operations, threat intelligence and incident response.
– Working knowledge of vulnerability management.
– Strong analytical, troubleshooting and risk-based decision-making skills.
– Ability to communicate with technical and non-technical stakeholders.
– Experience working with global teams and managed security service providers.
7. Educational Qualifications
Preferred qualifications:
– B.E. / B.Tech in Computer Science, Information Technology, Electronics and Communications or a related discipline.
– M.E. / M.Tech in a relevant engineering or technology discipline.
Certifications valued:
– Microsoft Certified: Security Operations Analyst Associate (SC-200)
– Microsoft Certified: Azure Security Engineer Associate (AZ-500)
– Other Microsoft identity, security or cloud certifications
– CompTIA Security+
– Certified Ethical Hacker (CEH)
– GIAC Certified Incident Handler (GCIH)
– Certified Information Systems Security Professional (CISSP)
Certifications are desirable and do not replace practical security operations experience.
8. Benefits & Perks
– Flexible working arrangements.
– Competitive pay hikes and bonus packages.
– Skill enhancement and professional development opportunities.
– Health and wellbeing programmes.
– Access to learning resources from AWS, SkillSoft and other partners.
– Inclusive and collaborative global working environment.
– Equal opportunity employment.
9. Application Details
Detail Information
Company Synamedia
Location Bangalore, India
Job ID Job_1036
Recruitment Email hr-recruitment@synamedia.com

For recruitment-related assistance or application accommodations, candidates can contact the recruitment team using the email above.
10. Ideal Candidate Profile at a Glance
– Experience: 5+ years in SOC / Security Operations / Incident Response.
– Primary tools: Microsoft Sentinel and Microsoft Defender XDR.
– Important skills: KQL, Microsoft Entra ID, Azure security, SIEM, threat hunting and incident response.
– Additional expertise: Vulnerability management, security audits, threat intelligence and reporting.
– Location: Bangalore.
– Employment: Permanent, regular employee.
11. Recruitment Notes & Clarifications
1. Experience is mandatory: Minimum 5 years in SOC, cyber incident response or related security operations.
2. Microsoft security expertise is central: Sentinel, Defender XDR, Entra ID and KQL are the key technical requirements.
3. Certifications are preferred, not mandatory. Practical experience takes priority.
4. The job-details qualification keywords include dashboard development, automation, risk assessments, CISSP, CEH and other broad terms. These should not all be treated as separate mandatory requirements.
5. Salary is not disclosed.
6. Exact work arrangement (office-based, hybrid or remote) is not specified, despite flexible working arrangements being mentioned.
Recruitment classification: Experienced SOC / Microsoft Security Operations Engineer – suitable for candidates with strong Microsoft Sentinel, Defender XDR, KQL and incident response experience.