Senior Security Operations Engineer

Couchbase
Bengaluru
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringEducation: bachelorsSkills: ["Incident triage","Investigation","Containment","Written communication","Judgment"]

Join Couchbase’s global Information Security team as a second dedicated SecOps engineer. You’ll split time between SecOps operations (alert triage, investigation, containment, SIEM tuning, and playbooks) and security engineering (automation and AI-assisted triage, detection content, and response workflows across cloud, identity, endpoint, and AI governance). You’ll measure MTTD/MTTR against targets and collaborate across Engineering, SRE, IT, Cloud, Legal, and Compliance to own security outcomes.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Couchbase
Couchbase
15 hours ago

Senior Security Operations Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Join Couchbase’s global Information Security team as a second dedicated SecOps engineer. You’ll split time between SecOps operations (alert triage, investigation, containment, SIEM tuning, and playbooks) and security engineering (automation and AI-assisted triage, detection content, and response workflows across cloud, identity, endpoint, and AI governance). You’ll measure MTTD/MTTR against targets and collaborate across Engineering, SRE, IT, Cloud, Legal, and Compliance to own security outcomes.
Location: Bengaluru
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own alert triage, investigation, and containment alongside the existing SecOps engineer under a follow-the-sun coverage model.
  • •Manage SIEM operations day to day, including log source onboarding, normalization, retention, correlation rule development, validation, and alert-tuning cadence.
  • •Build automation and agent-based workflows for enrichment, triage, and automated containment, including tuning AI triage agents and integrating security tooling via APIs.
  • •Run vulnerability management across endpoints, servers, network devices, and cloud workloads with scan coverage, risk-based prioritization, SLA tracking, verification, and asset register reconciliation.
  • •Operate cloud and infrastructure security programs (CSPM/CNAPP, policy enforcement and exceptions, infrastructure-as-code baselines, drift detection, key/secrets management, and EDR + identity detections).

Pay and Benefits

Perks:Health InsuranceDentalVisionLife InsuranceRetirement

Key Requirements

  • •5–8 years hands-on security operations experience, including real incident triage, investigation, and containment.
  • •Deep practical SIEM experience with writing/tuning detections, onboarding log sources, and building correlation logic (Coralogix, Splunk, Sentinel, Elastic, or similar).
  • •Strong public cloud security skills on at least one of AWS, Azure, or GCP, plus working knowledge of Kubernetes and container security.
  • •Hands-on EDR operation and tuning (SentinelOne, CrowdStrike, or equivalent).
  • •Vulnerability management at scale (scanning, risk-based prioritization, remediation tracking, and exception governance) plus scripting/automation with Python and REST APIs and Terraform comfort.
Experience:Security operationsSIEMPublic cloudKubernetesEDR
Education:Bachelor's in Computer Science, Information Security, or a related field
Skills:Incident triageInvestigationContainmentWritten communicationJudgment
Certifications:GCIAGCIHGCFAOSCPAWS Security SpecialtySecurity+CISSP
Tech Stack:SIEMCoralogixSplunkSentinelElasticAWSAzureGCPKubernetesEDRSentinelOneCrowdStrikeRapid7QualysTenablePythonREST APIsTerraformOktaSSO

Company Brief

Couchbase
Develops a distributed NoSQL database platform that enables enterprises to build, deploy, and manage modern applications with high performance, scalability, and flexible data models across cloud and on-premises environments.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 100M to 250M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 2011
WebsiteLinkedIn