Senior Security Engineer

Arcadia is an AI-powered energy intelligence platform for businesses, providing solutions for utility bill management, energy procurement advisory, and sustainability reporting. They focus on simplifying energy management through data, AI analytics, and expert advisory, serving Fortune 2000 companies.

Location: Chennai, India

Responsibilities

• Own and operate Arcadia’s endpoint security program on CrowdStrike, including detection tuning, response workflows, and policy management across Windows and macOS
• Lead vulnerability management end to end: scanning cadence, risk-based prioritization, and partnering with key stakeholders to drive remediation to closure
• Partner with engineering teams to strengthen cloud security in AWS over time, contributing to identity hygiene, configuration review, baseline assessments, and detection coverage as the program matures
• Serve as the response lead for security incidents: owning triage, investigation, containment, and post-incident review in coordination with senior security leadership
• Build and maintain detection content, response runbooks, and operational metrics that demonstrate program effectiveness
• Support Arcadia’s SOC 2 Type II program by owning the technical controls within your scope, producing audit evidence, and partnering with the GRC function on control design and testing
• Partner with the global IT team on identity, device management, and email security to ensure security best practices are operationalized
• Contribute to security engineering initiatives when the work calls for it: including tooling, automation, and infrastructure improvements that scale SecOps capabilities
• Mentor teammates and elevate the technical depth of the security team
• Contribute to security roadmap planning and represent security operations in cross-functional initiatives

Requirements

• 5 to 8 years of experience in security operations, endpoint security, or cloud security roles
• Demonstrated ownership of EDR platforms, with CrowdStrike preferred (SentinelOne, Defender, or equivalent also acceptable), including detection tuning and response workflows
• Working knowledge of AWS security fundamentals, including IAM, logging and detection (CloudTrail, GuardDuty, or equivalent), and common misconfiguration patterns, with the ability to grow this practice in partnership with engineering
• Practical experience leading or significantly contributing to security incidents from detection through resolution
• Working knowledge of vulnerability management programs at scale, including prioritization frameworks and remediation partnership with cross-functional teams
• Familiarity with SOC 2 Type II or comparable control frameworks, with the ability to operate technical controls and produce audit evidence
• Ability to operate independently, drive projects to completion, and exercise sound judgment with light oversight
• Fluent written and spoken English. Daily collaboration across our global team is conducted in English, including incident response, technical documentation, code review, and meetings
• Availability to overlap with U.S. working hours for collaboration meetings, with overlap typically ending no later than 8:30 PM IST

Benefits

• Competitive compensation based on market standards
• We are working on a hybrid model with remote first policy
• Flexible Leave Policy
• Office located in the heart of the city in case you need to step in for any purpose
• Comprehensive coverage including accident policy and life insurance
• Medical Insurance (1+5 Family Members)
• Flexible Benefit Plan
• Awards and Bonus
• Annual performance cycle
• Quarterly engagement activities
• A supportive workplace culture that values diversity, empathy, teamwork, trust, and efficiency