- Location
- Chennai, IN
- Department
- IT
- Seniority
- Lead
- Closing date
- Today
- Source
- iCIMS
Description
Company Profile
Lennox (NYSE: LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member’s contributions and offers a supportive environment for career development. Come, stay, and grow with us.
Job Description
Cyber Defense Strategy & Architecture
- Define and maintain enterprise Blue Team security architecture roadmap.
- Design scalable cyber defense capabilities across cloud, endpoint, identity, network, applications, OT, and SaaS environments.
- Lead security architecture decisions for SIEM, SOAR, XDR, UEBA, TIP, DSPM, and AI Security platforms.
- Establish security engineering standards, reference architectures, and defense patterns.
SIEM Engineering & Detection Strategy
- Own enterprise SIEM architecture, use case lifecycle, content governance, and platform optimization.
- Develop risk-based detection frameworks aligned to MITRE ATT&CK.
- Drive Detection-as-Code practices with CI/CD integration.
- Improve detection fidelity through behavioral analytics, threat intelligence, and AI-powered analytics.
- Establish threat-based detection coverage metrics.
SOAR & Autonomous Security Operations
- Lead SOAR architecture and orchestration strategy.
- Design automated response playbooks for high-volume attack scenarios.
- Implement machine-speed containment actions such as:
- Endpoint isolation
- Account suspension
- Token revocation
- Network containment
- Email quarantine
- IOC blocking
- Reduce analyst workload through AI-assisted investigation and autonomous workflows.
AI Security Defense
- Design controls to detect and defend against:
- Prompt injection attacks
- LLM abuse
- AI model poisoning
- Data leakage through AI platforms
- Autonomous agent attacks
- Deepfake and synthetic identity threats
- Implement AI-assisted threat detection, correlation, and investigation capabilities.
- Establish governance, monitoring, and security controls for enterprise AI adoption.
Threat Hunting & Adversary Detection
- Build and lead enterprise proactive threat hunting programs.
- Develop advanced hunting methodologies focused on:
- Living-off-the-land attacks
- Identity compromise
- Lateral movement
- Cloud-native attacks
- Ransomware precursors
- Insider threats
- AI-driven attack campaigns
- Create repeatable hunt playbooks and hunting analytics.
- Drive adversary emulation and purple team exercises.
Emerging Threat Research
- Track evolving threat actor TTPs.
- Conduct threat-focused research on:
- AI-powered phishing
- GenAI-enabled malware
- Autonomous attack tooling
- Ransomware evolution
- Supply chain attacks
- Cloud and SaaS threats
- Translate intelligence into actionable detections and mitigations.
Security Leadership & Influence
- Provide technical leadership across SOC, IR, CDE, DLP, Cloud Security, and AppSec teams.
- Mentor senior security engineers, architects, and threat hunters.
- Act as executive advisor for cyber defense modernization initiatives.
- Lead security architecture reviews and tabletop exercises.
Qualifications
Experience
- 15+ years of cybersecurity experience.
- 8+ years in Security Operations, SIEM Engineering, Threat Hunting, or Cyber Defense Architecture.
- Proven experience building enterprise-scale SOC programs.
- Experience leading security transformation initiatives.
Technical Expertise
Deep expertise in:
- SIEM Platforms
- Microsoft Sentinel
- Splunk
- Cortex XSIAM
- Elastic
- SOAR Platforms
- Cortex XSOAR
- Microsoft Security Copilot & Sentinel Automation
- Splunk SOAR
- Detection Engineering
- Threat Intelligence
- MITRE ATT&CK
- Threat Hunting
- Cloud Security
- Identity Security
- EDR/XDR
- UEBA
- Data Protection & DLP
- Security Analytics
- AI Security
Preferred Certifications
CISSP, GCIA, GCTI, GREM, GMON, SABSA, Azure Security Engineer, Microsoft Sentinel Specialist, SANS Threat Hunting Certifications
