Sr. Cybersecurity Engineer

Thank you for considering a career at Ensemble Health Partners India!

Ensemble Health Partners - The single solution for a frictionless revenue cycle with the purpose of redefining the possible in healthcare by empowering people to be the difference. Our India Office is an extension of Ensemble’s team and culture designed to augment and enhance our talent and skill base in Revenue Cycle Management in addition to our long-standing presence in technology. Leveraging our platform of services, technology, business intelligence and analytics, our teams are creating and maintaining innovative products and systems to help our revenue cycle operators achieve the most efficient, ideal outcomes for our clients. Our teams are certified in revenue cycle best practices and are supporting end-to-end RCM operations. We are at the forefront of innovation using cutting-edge technology to drive meaningful impact in the Revenue Cycle Management landscape. As a leading player in the industry, we offer an environment that fosters growth, creativity, and collaboration, where your expertise will be valued, and your contributions will make a difference.

The Opportunity

Job Title

Senior Engineer, Cybersecurity

Experience

8+ Years

Job Location

Hyderabad (Hybrid)

Position Summary

We are seeking an experienced Cybersecurity Engineer to join our Security Engineering team. This role is responsible for designing, deploying, and optimizing the enterprise security technology stack - spanning endpoint, identity, network, cloud, and data security platforms. The ideal candidate has 8+ years of progressive cybersecurity engineering experience and deep technical knowledge across a broad range of modern security platforms. This is a hands-on engineering role offering a growth path toward Senior Cybersecurity Engineer or Lead Cybersecurity Engineer.

Key Responsibilities

Design, deploy, configure, and maintain security platforms across Endpoint Detection and Response (EDR), Identity and Access Management (IAM), the Microsoft Defender stack, network security, and application security tooling.

Deploy and manage Network Detection and Response (NDR), SIEM logging/monitoring, and User and Entity Behavior Analytics (UEBA) solutions to strengthen enterprise-wide threat visibility.

Build, maintain, and optimize security automation and orchestration (SOAR) playbooks to streamline detection, response, and operational workflows.

Manage security agent deployment, health, and lifecycle across endpoints (EDR, logging, and monitoring agents).

Partner with and oversee Managed Security Service Provider (MSSP) relationships, serving as the internal technical escalation point and ensuring SLA and detection quality standards are met.

Own and mature the vulnerability management program, including scanning, prioritization, remediation tracking, and reporting.

Implement and manage Cloud Security Posture Management (CSPM), Data Security Posture Management (DSPM), and AI Security Posture Management (AI-SPM) tool to identify and remediate misconfigurations and emerging risk across cloud and AI environments.

Administer and optimize the Microsoft Defender suite (Defender for Endpoint, Identity, Cloud Apps, Office 365, and Defender for Cloud).

Support IAM engineering initiatives, including identity lifecycle management, conditional access, privileged access management (PAM), and single sign-on (SSO).

Contribute to security design reviews and help define technical standards for new projects and initiatives.

Support incident response and threat hunting activities, leveraging SIEM, NDR, and UEBA telemetry to investigate and contain threats.

Collaborate cross-functionally with network, cloud, application, and infrastructure teams to embed security into the broader technology environment.

Maintain accurate network and system diagrams, runbooks, standard operating procedures (SOPs), and change documentation.

Participate in an On-Call rotation to support critical security incidents outside of business hours.

Mentor junior security engineers and share knowledge across the team.

Required Qualifications

8+ years of progressive experience in cybersecurity engineering or a related technical security role.

Hands-on experience with Endpoint Detection and Response (EDR) and endpoint agent management.

Hands-on experience with Identity and Access Management (IAM) platforms and identity security concepts.

Working experience with the Microsoft Defender stack (Defender for Endpoint, Identity, Cloud Apps, Office 365, and/or Defender for Cloud).

Experience with network security management and application security/management practices.

Experience with Network Detection and Response (NDR) and UEBA solutions for threat and anomaly detection.

Experience with SIEM platforms for logging, monitoring, detection engineerin*g, and alert tuning.

Experience with security automation/orchestration (SOAR) tooling.

Experience working with or managing a Managed Security Service Provider (MSSP).

Experience with vulnerability management programs and remediation processes.

Experience with Cloud Security Posture Management (CSPM) and Data Security Posture Management (DSPM); exposure to AI Security Posture Management (AI-SPM) is a strong plus.

Strong understanding of networking, cloud platforms (Azure and/or AWS), and identity protocols (SAML, OAuth, OIDC).

Strong analytical, troubleshooting, and problem-solving skills, with the ability to work across multiple security domains simultaneously.

Excellent written and verbal communication skills, including the ability to present technical decisions and risk trade-offs to both technical and non-technical stakeholders.

Ability to work both independently and collaboratively across engineering and security operations teams.

Required Certifications

Candidates should hold, or be actively working toward, a combination of the following

CCSP (Certified Cloud Security Professional)

CISM (Certified Information Sec