Principal Security Engineer - SIEM

Principal Security Engineer India Cybersecurity Engineering :

The Principal Security Engineer is a hands-on role that blends cloud security engineering with security operations and threat intelligence. This position plays an integral role in protecting Cornerstone OnDemand from internal and external threats, partnering closely with technology, product, and operations teams to define and enforce security best practices, automate controls, assess risks, and proactively detect, investigate, and respond to threats across the enterprise.

In this role you will :

• Lead security operations functions including detection engineering, monitoring, incident response, and threat hunting across cloud and enterprise environments.
• Analyze and improve Cornerstones security architecture.
• Evaluate, select and implement new security tools and practices.
• Develop and deploy automated security controls leveraging the security toolchain to detect, prevent, and remediate threats.
• Contribute to open-source threat intelligence initiatives.
• Conduct threat modeling, vulnerability assessments, penetration testing, and red / purple team exercises to uncover and remediate risks.
• Drive threat intelligence initiatives by ingesting and correlating intel feeds, monitoring dark web sources, and leveraging external attack surface monitoring and security rating services (e.g., Security Scorecard, BitSight).
• Proactively hunt for malicious or anomalous activity in EDR, SIEM, and cloud telemetry to identify evolving attacker tactics, techniques, and procedures (TTPs).
• Coordinate and lead investigations into security incidents, collaborating with SOC, IT, DevOps, and product teams to ensure timely response and recovery.
• Perform security architecture and design reviews with engineering teams to integrate security standards into development and deployment lifecycles.
• Provide security recommendations for cloud infrastructure, enterprise IT, and SaaS services, defining and enforcing policies and standards.
• Stay current on adversary trends, industry threat reports, and emerging attack vectors to continually improve detection and prevention capabilities.
• Provide hands-on support across a wide range of security technologies, including EDR, SIEM, IDS / IPS, vulnerability management tools, container / Kubernetes security, and automation frameworks.

Youve got what it takes if you have :

(ref : hirist.tech)