Senior Security Engineer

Senior Security Engineer (Security Operations) Who we are Arcadia is the AI-powered energy intelligence platform for businesses. We replace fragmented tools and manual workflows with one platform to pay utility bills, buy energy, and advance sustainability — across every location, at enterprise scale. Trusted by Fortune 2000 companies, Arcadia combines unified data, AI-powered analytics, and expert advisory to help enterprise teams save money, mitigate risk, and cut carbon. We deliver this through three comprehensive solutions: ● Utility Bill Management: Automating the entire utility bill lifecycle — from data capture and validation to payment processing and auditing. ● Energy Procurement Advisory: Bringing together comprehensive data, AI-powered analytics, market expertise, and a strong partner network to make sophisticated procurement options accessible to all. . ● Sustainability Reporting — Verified emissions data with seamless integration into leading sustainability platforms. Tackling the world's most complex energy challenges requires diverse thinking. We're building teams of people from different backgrounds, industries, and disciplines — united by a belief that energy management should be simple, intelligent, and a genuine driver of business value.  Job summary As a Senior Security Engineer, you’ll be the technical anchor of Arcadia’s security operations function, leading the daily defense of our endpoints, cloud infrastructure, and identity systems. You’ll operate with significant autonomy and strong collaboration across our global team, drive initiatives end to end, and partner directly with security leadership in the U.S. to mature our detection, response, and vulnerability management programs. You’ll also support our SOC 2 Type II program by owning the technical controls within your scope. This person will report to the Senior Manager of Security in the U.S., with strong local collaboration in Chennai, India. You’ll work as part of a single global security team operating with consistent expectations and shared standards across the globe. What we’re looking for We’re seeking a Senior Security Engineer based in Chennai, India with 5 to 8 years of experience in security operations, endpoint security, and cloud security. This is an Individual Contributor role at the Senior (L4) level, anchored in SecOps with expected contributions to security engineering work. The ideal candidate is technically deep, operationally disciplined, and comfortable driving programs end to end with light oversight. You should be equally at ease tuning an EDR detection, leading a vulnerability remediation effort with key stakeholders, and leading security incident response. You’ll bring strong judgment, clear written communication, and the ability to translate technical risk into business terms. This role goes beyond reactive security analyst work and includes leadership of detection, response, and engineering initiatives. You’ll be expected to shape how Arcadia’s security operations function evolves, mentor teammates, and contribute to the broader security strategy. At Arcadia, we value demonstrated experience over certifications. Whatever certifications you hold or don’t hold, what matters most is the depth of your hands-on security work and the impact you’ve had on the teams and programs you’ve supported. What you’ll do ● Own and operate Arcadia’s endpoint security program on CrowdStrike, including detection tuning, response workflows, and policy management across Windows and macOS ● Lead vulnerability management end to end: scanning cadence, risk-based prioritization, and partnering with key stakeholders to drive remediation to closure ● Partner with engineering teams to strengthen cloud security in AWS over time, contributing to identity hygiene, configuration review, baseline assessments, and detection coverage as the program matures ● Serve as the response lead for security incidents: owning triage, investigation, containment, and post-incident review in coordination with senior security leadership ● Build and maintain detection content, response runbooks, and operational metrics that demonstrate program effectiveness ● Support Arcadia’s SOC 2 Type II program by owning the technical controls within your scope, producing audit evidence, and partnering with the GRC function on control design and testing ● Partner with the global IT team on identity, device management, and email security to ensure security best practices are operationalized ● Contribute to security engineering initiatives when the work calls for it: including tooling, automation, and infrastructure improvements that scale SecOps capabilities ● Mentor teammates and elevate the technical depth of the security team ● Contribute to security roadmap planning and represent security operations in cross-functional initiatives What will help you succeed ● 5 to 8 years of experience in security operations, endpoint security, or cloud security roles ● Demonstrated ownership of EDR platforms, with CrowdStrike preferred (SentinelOne, Defender, or equivalent also acceptable), including detection tuning and response workflows ● Working knowledge of AWS security fundamentals, including IAM, logging and detection (CloudTrail, GuardDuty, or equivalent), and common misconfiguration patterns, with the ability to grow this practice in partnership with engineering ● Practical experience leading or significantly contributing to security incidents from detection through resolution ● Working knowledge of vulnerability management programs at scale, including prioritization frameworks and remediation partnership with cross-functional teams ● Familiarity with SOC 2 Type II or comparable control frameworks, with the ability to operate technical controls and produce audit evidence ● Ability to operate independently, drive projects to completion, and exercise sound judgment with light oversight ● Fluent written and spoken English. Daily collaboration across our global team is conducted in English, including incident response, technical documentation, code review, and meetings ● Availability to overlap with U.S. working hours for collaboration meetings, with overlap typically ending no later than 8:30 PM IST Nice-to-have ● Proficiency in at least one scripting language for automation and tooling ● Experience with identity providers (Okta, Entra ID, or equivalent) and SSO/MFA hardening ● Exposure to detection-as-code workflows, SIEM tuning, or building security automations ● Experience working in a globally distributed security team