Who We Are

Vultr is on a mission to make high-performance cloud infrastructure easy to use, affordable, and locally accessible for enterprises and AI innovators around the world. With 33 global cloud data center locations, Vultr is trusted by hundreds of thousands of active customers across 185 countries for its flexible, scalable, global Cloud Compute, Cloud GPU, Bare Metal, and Cloud Storage solutions. In December 2024 Vultr announced an equity financing at a $3.5 billion valuation. Founded by David Aninowsky and self-funded for over a decade, Vultr has grown to become the world’s largest privately-held cloud infrastructure company.

Vultr Cares

Medical Insurance stipend paid annually

9 Company-Paid Holidays

Generous Leave Policy + 1 month paid sabbatical every 5 years + Anniversary Bonus each year

Professional Development Reimbursement

Internet reimbursement

Fitness membership reimbursement

Company paid Wellable subscription

Join Vultr

Vultr is expanding its India presence and is building its first Global Integrated Operations Command Center (GIOC) in Chennai — the 24x7 nerve center for monitoring, triage, and incident resolution across Vultr’s global security operations.

We are seeking Senior Security Engineers to own escalated investigations and lead incident response across Vultr’s security surface — SIEM, threat detection, identity and access, and endpoint/cloud telemetry. This is a deep-dive role for experienced security operators who lead investigations, threat hunting, and forensics, drive detection engineering, and mentor Security Engineers — and who want to grow toward incident response, threat-detection, or security engineering leadership. You must be comfortable with a rotational shift and on-call model — including nights, weekends, and holidays — to sustain follow-the-sun coverage.

Role Overview

The Senior Security Engineer owns alerts escalated from Security Engineer and leads investigation on the most complex security events. You perform deep analysis, drive incidents to resolution within defined SLAs, determine root cause and scope, contain and eradicate threats, and deliver detections and fixes that prevent recurrence. The role ensures deep technical investigation and platform security that protects customer data and platform integrity.

You act as a senior escalation point and security subject-matter expert, leading incident-response bridges, partnering with Secops/Engineering SMEs on remediation, and raising the team’s capability through detections, runbooks, and mentoring. Success is measured by MTTR/MTTC, investigation quality, recurrence reduction, and detection coverage. The role runs on a rotational shift and on-call schedule to sustain 24x7 coverage.

Key Responsibilities

Escalated Investigation & Incident Response

Own alerts escalated from Security Engineers across SIEM, identity/access, endpoint, and cloud, and drive investigations to closure

Lead deep analysis using log correlation, endpoint and network forensics, and threat-intelligence enrichment

Meet response SLA targets and provide regular, accurate updates throughout the incident lifecycle

Containment, Eradication & Root Cause

Determine scope, root cause, and attacker activity; distinguish true positives from benign anomalies

Drive containment, eradication, and recovery actions, and implement hardening to close the attack path

Partner with L3 / Engineering SMEs on remediation and with stakeholders on disclosure and compliance obligations

Preserve forensic evidence and maintain chain-of-custody throughout the investigation

Major Incident Response & Technical Leadership

Act as technical lead on major-incident (Sev-0 / Sev-1) and suspected-breach bridges, coordinating across towers

Make and document containment and recovery decisions under pressure, balancing risk and availability

Serve as senior escalation point and security subject-matter expert for the GIOC

Detection Engineering, Threat Hunting & Automation

Build and tune detections and correlation rules to improve fidelity and reduce false positives