Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

First Advantage

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

👥 HR Tech

☁️ SaaS

🤝 B2B

HR Tech • SaaS • B2B

First Advantage is a leading provider of global software and data for the HR technology market. Enabled by proprietary technology and AI, it delivers employment background screening, digital identity and verification services, APIs, and risk-monitoring products across the employee lifecycle. The company emphasizes automation and continuous identity verification, serving roughly 80,000 organizations in over 200 countries and territories, and maintains large proprietary databases (over one billion records). Headquartered in Atlanta and publicly traded (NASDAQ: FA), First Advantage focuses on helping customers hire smarter and onboard faster through software, data and services.

📋 Description

• Investigate and resolve Level 2 and Level 3 alerts, cases, and incidents using established procedures, playbooks, and escalation paths • Analyze endpoint, identity, email, cloud, network, and application telemetry to validate activity, determine scope, and document findings • Develop, test, deploy, tune, and document detections across SIEM, XDR, EDR, cloud, identity, email, and other telemetry • Develop approved enrichment, triage, notification, containment, and remediation workflows for Tier 1 scenarios • Perform scoped threat hunts and retrospective searches using documented hypotheses and established analysis methods • Support telemetry onboarding, platform configuration, integrations, and troubleshooting • Maintain case records, detection documentation, automation runbooks, and technical procedures • Contribute to project milestones and escalate work beyond established authority, procedures, or technical scope • Monitor and investigate security events from SaaS applications, PaaS platforms, APIs, web applications, and database services • Develop application-layer threat detections, enrichment logic, and response workflows • Support Sentinel, Defender XDR, SOAR, telemetry connectors, case management, and related integrations • Coordinate routine technical work with internal teams and service providers

🎯 Requirements

• General knowledge of security operations, incident response, detection engineering, and common attacker techniques • Hands-on experience with SIEM, EDR/XDR, SOAR, or comparable security technologies • Experience using KQL, SPL, SQL, or a comparable query language • Foundational experience with PowerShell, Python, APIs, or comparable automation technologies • Ability to document technical findings clearly and exercise sound escalation judgment • Experience investigating endpoint, identity, email, cloud, network, or application security activity and preserving clear evidence of analysis • Working understanding of incident classification, escalation, containment, remediation, and recovery practices • Ability to use established engineering standards, peer review, source control, testing, and controlled deployment processes • Ability to balance concurrent incidents and engineering work, communicate status, and request guidance when scope or authority is exceeded • Bachelor + 2 years; Master + 0 years; PhD + 0 years; or equivalent • Relevant equivalent knowledge or work experience may be considered in accordance with the FA Technical Leveling definitions • Preferred: Hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, Azure, AWS, or Microsoft 365 • Preferred: Experience working with an outsourced SOC, MDR, MSSP, or managed threat hunting provider • Preferred: Experience creating security rules, playbooks, automation workflows, response actions, dashboards, or operational metrics • Preferred: Relevant certifications such as SC-200, Security+, CySA+, AZ-500, or equivalent

🏖️ Benefits

• Equal opportunity employer committed to a workplace and recruitment process free from unlawful discrimination, harassment, and retaliation • No recruitment fees charged to candidates