Security Operations Engineer II (Employer of Record)

Credit Acceptance

IndiaremotePosted 1 month ago

Skill Required

Security-OperationsCybersecurity-EngineeringSOC-AnalystThreat-DetectionIncident-ResponseSecurity-Operations-EngineerCybersecurity-Operations-EngineerSecurity EngineersecuritySOCtroubleshootingCybersecurityrelated fieldCD pipelinesEngineeringCloud SecurityautomationdevelopingShell ScriptingObservabilityanalyticsbuildingTestNGPythondesignCI/CDRustSIEMITILAPIsCiscoGitandFulltime

Key highlights

CTC Range: ₹ 24,21,038 - ₹ 35,50,856
Minimum 2 years of experience in cyber security, SOC detection, SIEM, IT, incident response, network security or security engineering
Employer of Record (EoR) partner in India for legal employment with locally compliant payroll
Globally distributed team with regular overlap required with U.S. business hours
Full integration into Credit Acceptance team despite EoR partnership
CI/CD pipelines and Infrastructure-as-Code workflows for security configurations

Role overview

Credit Acceptance is an award-winning used car finance company and one of the largest in the United States. This role involves working as a dedicated member of a globally distributed team, partnering with U.S. business partners to design, build, and scale security solutions. While the legal employer is an EoR partner, the candidate will be fully integrated into Credit Acceptance's team for day-to-day work.

Responsibilities

Operate and tune enterprise security tools (EDR, SIEM/SOAR, WAF/proxy, email security)
Manage proxy filtering policies, exceptions, SSL inspection, and performance troubleshooting
Build automation and playbooks (Python/PowerShell, SOAR, APIs) to streamline SecOps tasks
Implement CI/CD pipelines and Infrastructure-as-Code workflows for consistent, auditable security configuration changes
Author and tune detection rules; improve signal quality and reduce false positives
Maintain and author health dashboards, uptime/coverage metrics, and change governance documentation
Conduct knowledge transfers through runbooks, how-to guides, tabletop exercises, and lunch & learn training sessions
Maintain upgrade schedules, license compliance, configuration baselines, and key/secret rotations
Administer URL/category policies, SSL inspection, identity-aware policies, geo/risk-based controls, and performance troubleshooting
Analyze block events for false positives; measure impact; retire exceptions on schedule and report residual risk
Build and maintain an automation backlog in partnership with SecOps, prioritizing high-frequency, high-toil tasks
Provide on-call support for tooling availability and ingestion/normalization issues
Report on metrics (uptime, coverage, MTTR, lead time, change success rate, exception aging)
Keep documentation, diagrams, and asset inventories current
Monitor and respond to alerts raised by various toolsets as part of an ongoing 24/7 Security Operations Center
Report outages or incidents following guidelines and procedures
Detect, analyze, and respond to incidents, coordinate with other stakeholders for containing, eradicating, and recovering from an incident
Assist in developing testing criteria to implement new signatures/rules
Perform all other duties as assigned
Participate in on-call rotations, including nights, weekends, and holidays
Remain compliant with policies, processes and legal guidelines
Work remotely

Requirements

Bachelor's degree in computer science, Information Systems, Data Science or closely related field of study or equivalent experience
Minimum 2 years of experience in cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), operations incident response, network security or security engineering
Basic experience administering, deploying and managing security tools
Basic experience operating WAF/proxy and SIEM/SOAR
Scripting in Python and/or PowerShell and building API integrations; JSON/YAML proficiency
CI/CD and Git workflows; Infrastructure-as-Code for security configurations
Basic understanding of TLS/SSL, HTTP, identity-aware policies, and egress/ingress routing
Documentation discipline and change management (ITIL basics)
Ability to produce formal and informal reports, briefings, and analysis of security controls
Experience with Endpoint Detection and Response (EDR) or Intrusion Detection System or Intrusion Prevention System (IDS/IPS) monitoring tools
Understanding of MITRE ATT&CK Framework and Cyber Kill Chain flow
Understanding of incident response processes and risk management

Nice to have

GSEC, GCIA/GCED, GCDA, AZ-500, SC-200/SC-100, Network+ or CCNA
Web Application Firewall rulesets
Utilizing automation through Infrastructure as Code
Detection engineering (KQL/SPL), log pipelines, and data normalization
Zero Trust architecture and ZTNA posture policies
Understands Credit Acceptance's business model, operations and business terminology

Benefits

Award-winning company with workplace recognition in multiple categories
Globally distributed team environment
Legal employment through EoR partner in India with locally compliant payroll, benefits, and statutory coverage
Full integration into Credit Acceptance team for day-to-day work and collaboration
CTC Range: ₹ 24,21,038 - ₹ 35,50,856

Additional details

This role is hired through an Employer of Record (EoR) partner in India
Your legal employer will be the EoR partner in India
While legally employed by EoR partner, you will work full-time and be fully aligned to Credit Acceptance
Day-to-day work, responsibilities, and performance expectations will be consistent with global team members
Final CTC will be shared during the offer stage and will include all compensation components in detail as per EoR vendor's structure
Final compensation within range is influenced by role-specific skills, depth and experience level, industry background, relevant education and certifications
Company Values: Positive (maintaining resiliency and focusing on solutions), Respectful (collaborating and actively listening), Insightful (cultivating innovation, accumulating business and role specific knowledge, demonstrating self-awareness and making quality decisions), Direct (effectively communicating and conveying courage), Earnest (taking accountability, applying feedback and effectively planning and priority setting)