Staff Security Engineer

Cohesity

. Design and deliver Active Directory protection features including granular change tracking, object- and attribute-level recovery, forest-aware backup, and full forest recovery .

Posted 11/12/2026full-timeBangalore • IndiaLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Active Directory protection, identity security, and Windows internals, with a strong focus on software design and development. Proven ability to lead projects, mentor engineers, and implement robust security measures across the software lifecycle.

Highest-signal resume keywords

Active Directory InternalsWindows InternalsIdentity SecurityC++ DevelopmentTest Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software DesignChange AttributionDetection EngineeringCode SigningAgent DevelopmentVSS WritersShadow Copy APIsSIEM IntegrationPowerShell ModulesLDAP

Soft Skills

Analytical SkillsLeadershipMentoring AbilityInitiativeSound Risk Judgment

Tools & Technologies

Windows AgentGRPCETWWinDbgPerformance CountersMSI PackagingSilent UpgradesCertificate HandlingCrash RecoveryOrchestration

Industry Keywords

Cyber RecoveryChange TrackingAudit LogsPrivileged ObjectACL AbuseGroup Policy InternalsDistributed SystemsDurable State MachinesUSN RollbackDCSync

Tech Stack

Tools & technologies

Distributed SystemsDNSGRPCC++Go

About the role

Key responsibilities & impact

Design and deliver Active Directory protection features including granular change tracking, object- and attribute-level recovery, forest-aware backup, and full forest recovery
Build and own a signed, serviceable, silently upgradeable Windows agent running on domain controllers
Design identity threat detection, including change-delta engines, privileged-object and ACL-abuse rules, and findings pipelines into audit logs and SIEM
Ensure safe write and restore paths through idempotent steps, USN-rollback safety, and pre-flight validation before destructive actions
Engage across the security lifecycle through threat modeling, architecture review, attack-surface reduction, and vulnerability remediation
Write code and test automation, including automated recovery drills and fidelity validation
Lead projects, mentor engineers, and build Windows and Active Directory expertise across the team

Requirements

What you’ll need

B.S./M.S./Ph.D. in Computer Science, Electrical Engineering, or a related field
10+ years in software design and development, with significant time on Windows-platform software
5+ years with Active Directory internals, including software that reads, writes, replicates, backs up, or recovers directory data
3+ years in identity security, detection engineering, security architecture, or product security
Experience shipping agent or systems software onto customer-managed production infrastructure
Expertise in Windows internals, Active Directory internals, and AD security
Experience with Windows internals including registry and hive structure, SYSTEM hive, BootKey material, WMI, services, and RPC
Agent development in C++, C#, or Go
Experience with VSS writers and shadow copy APIs
Knowledge of Windows security model, including SIDs, tokens, privileges, ACLs, SDDL, impersonation, and service accounts
Experience with code signing, MSI packaging, silent upgrades, mTLS, certificate handling, and gRPC agent-to-cluster channels
Experience with WinDbg, ETW, performance counters, dump analysis, PowerShell modules, remoting, and hosting PowerShell from native code
Knowledge of Active Directory schema, object classes, naming contexts, linked-value replication, safe writes, LDAP, DirSync, USN cookies, tombstones, deleted-object lifetime, Recycle Bin, SID history, and GUID continuity semantics
Knowledge of Group Policy internals, SYSVOL, DFSR/FRS, authoritative restore, AD-integrated DNS, and delegation
Knowledge of ESE/JET, ntds.dit, esentutl, FSMO, trusts, repadmin/dcdiag, USN rollback, DC promotion, IFM, DSRM, and RODC
Knowledge of Kerberos, NTLM, DCSync, DCShadow, AdminSDHolder tampering, ACL abuse, privileged group manipulation, and ticket forgery
Experience with detection engineering, AD auditing, change attribution, and cyber recovery of identity
Knowledge of SIEM integration using syslog, CEF, and webhooks
Knowledge of distributed systems, durable state machines, idempotency, crash recovery, orchestration, LDAP, Kerberos, DNS, SMB, TLS, gRPC, and REST
Test automation experience for infrastructure software, including multi-domain forest labs, recovery drills, and upgrade/interoperability matrices
Excellent analytical skills, initiative leadership, mentoring ability, and sound risk judgment
Candidates outside the designated area must be committed to relocating before their start date and have the legal right to work in the job location

Benefits

Comp & perks

Hybrid work arrangement; employees within a reasonable commute work from core offices 2–3 days a week of their choosing
Relocation expected for candidates outside the designated area
Reasonable accommodation available during the application process