Senior Security Engineer

Cohesity is the leader in AI-powered data security. Over 13,600 enterprise customers, including over 85 of the Fortune 100 and nearly 70% of the Global 500, rely on Cohesity to strengthen their resilience while providing Gen AI insights into their vast amounts of data. Formed from the combination of Cohesity with Veritas’ enterprise data protection business, the company’s solutions secure and protect data on-premises, in the cloud, and at the edge. Backed by NVIDIA, IBM, HPE, Cisco, AWS, Google Cloud, and others, Cohesity is headquartered in Santa Clara, CA, with offices around the globe.

We’ve been named a Leader by multiple analyst firms and have been globally recognized for Innovation, Product Strength, and Simplicity in Design , and our culture.

Want to join the leader in AI-powered data security?

We are seeking a highly skilled Senior Security Engineer with strong expertise in Endpoint Detection & Response (EDR/XDR) tools (e.g., CrowdStrike Falcon), Security Information and Event Management (SIEM) platforms (e.g., Splunk, Google SecOps/Chronicle), Cloud Security across AWS, Azure, and GCP. The ideal candidate will have Deep investigation skills and cloud threat detection capabilities, Proven experience as Incident Commander during critical incidents, awareness of recent threats and adversarial techniques, Ability to quickly understand complex environments, Strong business and interpersonal skills to manage risks and collaborate with cross-functional teams

How Youll Spend Your Time Here

• Serve as a senior escalation point for high-severity alerts and incidents across on-prem, endpoint, and cloud workloads
• Perform deep-dive investigations into complex threats such as Cloud-native attacks, Malware and ransomware, Insider threats, Advanced Persistent Threat (APT) campaigns
• Correlate telemetry from EDR/XDR, SIEM, CSPM, and threat intel sources to detect sophisticated threats
• Lead Major Incident Response as Incident Commander, coordinating SOC, IR, Cloud, and IT teams
• Drive containment, eradication, and recovery for both on-premises and cloud security incidents
• Deliver comprehensive post-incident reports with actionable remediation guidance
• Lead and participate in Blue/Red team exercises to improve detection logic and align with MITRE ATT&CK
• Mentor SOC analysts and junior engineers in advanced investigations and cloud IR
• Review and update SOPs, protocols, and capabilities to address emerging threats
• Develop metrics and scorecards to measure Organizational risk, SOC operational effectiveness and efficiency
  
  

• EDR/XDR: Strong hands-on experience with CrowdStrike Falcon
• SIEM: Expertise in Splunk and/or Google SecOps (Chronicle)
• Cloud Security: Skilled in cloud monitoring (AWS, Azure, GCP) and incident handling
• Incident Response: Proven track record as Incident Commander handling multi-vector incidents
• OS Knowledge: Deep understanding of Windows and Linux internals
• DLP Tools: Proficiency with MS Defender, Zscaler
• CSPM Tools: Familiarity with Wiz, Qualys, AWS Security Hub, Azure Defender, GCP SCC
• SOAR Platforms: Experience with Splunk SOAR, Google Siemplify
• Scripting: Python, PowerShell, or similar for automation (preferred)