Security Engineer

About the Role

Join Vultr as we expand our India presence and build its first Global Integrated Operations Command Center (GIOC) in Chennai — the 24x7 nerve center for monitoring, triage, and first response across global security operations. We are seeking Security Engineers to serve as the first line of response across Vultr's security signal surface.

Role Overview

The Security Engineer is the entry point of the GIOC incident lifecycle. You will monitor security signals from a consolidated dashboard, acknowledge and triage alerts within SLA targets, execute documented runbooks to investigate common events, and escalate appropriately. Success is measured by first-response SLA adherence, triage accuracy, and runbook resolution rate.

Key Responsibilities

• Alert Monitoring & First Response: Monitor SIEM detections, authentication anomalies, threat-intel, and endpoint alerts from a single-pane-of-glass dashboard. Validate detections, rule out false positives, and review recent changes before acting.
• Triage & Severity Classification: Classify each alert by severity and impact, confirm the owning tower, route tickets accurately, maintain high triage accuracy, and escalate suspected breaches as high-severity until ruled out.
• Runbook-Driven Investigation & Containment: Match signatures to runbooks, perform first-line containment (isolate, disable), preserve evidence, and document every step with timestamps in the incident ticket.
• Escalation & Handoff: Escalate out-of-scope alerts cleanly. Initiate major-incident bridges for Sev-0/Sev-1 events. Track escalations to closure before resolving tickets.
• Operational Documentation & Communication: Maintain accurate shift logs, ticket updates, and incident timelines with chain-of-custody. Provide clear status communication following confidentiality protocols.