Lead Cybersecurity Engineer

The Role

We are looking for an experienced Lead Cybersecurity Engineer with 8+ years of experience to drive cybersecurity initiatives across Upstox. You will work closely with Cybersecurity leadership and Technology teams to strengthen our security posture across Cyber Defence, Incident Response, Cloud Security, Vulnerability Management, Infrastructure Security, Threat Detection, and Security Engineering.

This is a hands-on leadership role requiring strong technical depth, ownership, and the ability to lead complex security initiatives from strategy through execution.

What You'll Do

• Lead and own cybersecurity initiatives from identification and assessment through remediation and closure.
• Lead investigation, containment, and response to complex security incidents and threats.
• Drive SOC, threat detection, threat hunting, and incident response capabilities.
• Identify and mitigate security risks across applications, APIs, cloud, infrastructure, endpoints, and internal systems.
• Lead vulnerability management, security assessments, penetration-test remediation, and security reviews.
• Design, develop, and continuously improve SIEM, EDR/XDR, detection use cases, monitoring, and response processes.
• Perform advanced threat hunting, IOC analysis, attack-path analysis, and root-cause investigations.
• Drive security automation and improve MTTD, MTTR, detection coverage, and response effectiveness.
• Partner with Engineering, DevOps, Cloud, Infrastructure, and Product teams to drive security remediation and secure-by-design practices.
• Provide technical leadership and mentorship to cybersecurity engineers and analysts.
• Support security architecture reviews, audits, compliance, and regulatory requirements.
• Evaluate security tools, technologies, and vendors and drive their effective implementation.

What We're Looking For

• 8+ years of experience in Cybersecurity, Information Security, Security Engineering, or Cyber Defence.
• Strong hands-on expertise in multiple areas including SOC, Incident Response, Threat Detection, Cloud Security, Vulnerability Management, and Infrastructure Security.
• Strong experience with SIEM, EDR/XDR, SOAR, vulnerability management, firewalls, and security monitoring platforms.
• Strong understanding of networking, IAM, authentication/authorization, APIs, endpoint security, cloud security, and common attack techniques.
• Proven experience leading complex security incidents and driving remediation to closure.
• Strong knowledge of MITRE ATT&CK, threat intelligence, IOC analysis, detection engineering, and threat hunting.
• Hands-on experience with AWS and cloud security controls.
• Strong understanding of NIST, ISO 27001, CIS, and security best practices.
• Ability to independently lead security programs and influence technical stakeholders across the organization.
• Strong analytical, problem-solving, communication, and stakeholder-management skills.

Good to Have

• Experience in FinTech, Banking, Payments, or other regulated industries.
• Experience with Palo Alto, IBM QRadar, CrowdStrike, Cortex XDR, Trend Micro, BeyondTrust, IBM PAM, or One Identity.
• Experience with DevSecOps, CI/CD security, CSPM, SOAR, security automation, or detection engineering.
• Strong scripting/programming skills in Python, PowerShell, or Bash.
• Experience mentoring cybersecurity teams and leading cross-functional security programs.
• Certifications such as CISSP, OSCP, GCIH, GCIA, CEH, Security+, or equivalent.

Why This Role Rocks

Work on cybersecurity at the scale of a high-growth fintech platform, lead high-impact security initiatives, solve complex security challenges, and work closely with experienced Cybersecurity and Technology teams to strengthen Upstox's overall security posture.

Upstox is an Equal Opportunity Employer.