Lead Security Engineer

Company Overview :

Crest Data is the global leading provider of Data Analytics, Security, DevOps, Cloud Solutions, Software integrations, Analytics, and security-based technological services. With a clientele that includes several Fortune 500 corporations and some of the innovative Silicon Valley Startups

.

Company URL: http://www.crestdata.ai

Job Location - Ahmedabad

About the Role : Lead Security Engineer

Experience : 5+ Years

Responsibilities :

• Architect and lead end-to-end security platform implementations across SIEM, EDR, SOAR, and related tooling; including scoping, design, deployment, integration, and knowledge transfer.
• Serve as the primary technical point of contact for large, complex client engagements, managing stakeholder expectations and delivery quality simultaneously.
• Translate ambiguous client security requirements into structured implementation plans with defined milestones, acceptance criteria, and risk callouts.
• Develop detection content, response playbooks, and operational run books tailored to client environments and threat profiles, grounded in MITRE ATT&CK coverage mapping.
• Identify gaps in client security posture through structured assessments and present prioritized, business-contextualized remediation roadmaps to both technical teams and executive stakeholders.
• Mentor and provide technical direction to mid-level and junior consultants on active engagements, setting quality standards for deliverables and client interactions.
• Contribute to pre-sales and solution scoping activities, including technical discovery, proposal development, and effort estimation. Drive internal knowledge development through documentation of repeatable methodologies, detection frameworks, and lessons learned from client deployments.

Required Skills :

• Proven track record owning large client engagements — full lifecycle, from requirements through delivery — with direct accountability for outcomes and client satisfaction.

• Deep hands-on expertise with at least two enterprise SIEM platforms (PAN XSIAM, CrowdStrike Falcon, Splunk, Elastic Security, or IBM QRadar), including architecture design, data onboarding, detection engineering, and performance tuning at scale.

• Hands-on experience with EDR platforms (CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, or equivalent) in enterprise deployment and operational contexts.

Nice to Have :

• Advanced certifications: CISSP, CISM, GCIA, GCED, GCIH, or equivalent; SIEM/platform vendor certifications (Splunk Architect, CrowdStrike Certified Falcon Administrator, etc.)

are a plus.

• Cloud security architecture and implementation experience across AWS, Azure, or GCP — including native security services, cloud SIEM integration, and identity-based threat

detection.

• Scripting and automation capability (Python, PowerShell, or Bash) applied to security engineering tasks: parser development, detection pipeline automation, or SOAR playbook construction.

• Prior experience in a formal people management, team lead, or technical lead capacity — even informally within a consulting engagement

structure.

• Familiarity with pre-sales motions, including client discovery, solution design, and proposal support in a consulting or professional services context

.• Exposure to compliance and regulatory frameworks (NIST CSF, SOC 2, ISO 27001, PCI-DSS, HIPAA) as they apply to security architecture and control design.