The Company
Egon Zehnder is the world’s preeminent leadership advisory firm, inspiring leaders to navigate complex questions with human answers. We have more than 560+ consultants who bring together vast industry experience and diverse insight, operating globally through 68 offices in 36 countries spanning across Europe, the Americas, Asia Pacific, the Middle East, and Africa. We believe that together we can transform people, organizations, and the world through leadership. Our clients range from the largest corporations to emerging growth companies, government and regulatory bodies, and major educational and cultural institutions. We collaborate as One Firm across industries and geographies, leveraging strengths of every colleague and operate as a private partnership independent of any outside interests.
Knowledge Centre India (KCI)
Knowledge Center India (KCI) is the central engine that drives the operational value for the firm. Established in 2004, KCI has evolved over the years from purely operational efficiencies into more value-added service offerings, becoming a true business partner. There are various teams based at KCI that work with Global Offices, Practice Groups, and the Management across all aspects of the firm's business life cycle. With a headcount of more than 500, the center has 5 core teams working including Experts, Research Operations, Visual Solutions, Projects/CV Capture and Digital IT, working round the clock on many mission critical elements.
Your Journey at Egon Zehnder Starts Here
At EZ, you have the opportunity to deliver digital transformation initiatives across the globe for the organization. Our focus on emerging technology solutions along with our commitment to internal career growth and exceptional client value.
Who we are!
We are part of Digital-IT team established 17 years ago in Gurgaon, India to provide technology support and rollout digital initiatives to 60 plus global offices. Digital IT has six key pillars – Functional Technology; Digital Technology; Security & Architecture; Infrastructure & Services and Digital Success & Collaboration Technology to support business and to take lead on digital transformation initiatives with the total strength of 200+ team members across the globe.
The Position
We are looking for a hands-on ServiceNow Developer with strong experience across ITSM processes development and ITOM capabilities, particularly CMDB, Discovery, and Service Mapping. The role involves developing, administering, and continuously improving the ServiceNow platform in an enterprise environment, with a focus on service quality, automation, and data integrity.
The ideal candidate will work closely with operations, infrastructure, and application teams to enhance platform adoption, optimize processes, and ensure ServiceNow effectively supports business and IT operations.
Requirements
Key Responsibilities
Threat Hunting & Detection Engineering
Lead proactive threat hunting activities across endpoint, network, identity, and cloud environments to identify advanced threats and malicious activity.
Develop, optimize, and maintain high-fidelity detections across SIEM, EDR/XDR, and SOAR platforms.
Leverage frameworks such as MITRE ATT&CK to assess detection coverage and enhance monitoring capabilities.
Analyse security telemetry using KQL, Sigma, YARA, and other detection technologies to identify indicators of compromise and attack patterns.
Cyber Defence Engineering & Automation
Engineer, integrate, and manage cyber defence technologies, including Microsoft Sentinel, Microsoft Defender, CrowdStrike, SOAR, and Threat Intelligence platforms.
Design and implement automation workflows and response playbooks to improve operational efficiency and accelerate incident response.
Partner with Infrastructure, Network, Cloud, and Workplace Technology teams to strengthen security visibility and telemetry coverage.
Incident Response & Threat Intelligence
Act as a senior technical escalation point for complex security incidents and investigations.
Translate threat intelligence into actionable detections, threat hunting use cases, and security controls.
Conduct root cause analysis and drive continuous improvement through post-incident reviews and lessons learned.
Continuous Improvement & Collaboration
Participate in purple team exercises and adversary simulations to validate and improve detection effectiveness.
Develop security metrics, dashboards, and reports to measure cyber defence maturity and operational effectiveness.
Mentor junior team members and contribute to the evolution of Cyber Defence Engineering practices and standards.
What We're Looking For
5-8 years of experience in Cyber Security with a focus on Threat Hunting, Detection Engineering, Incident Response, or SOC Operations.
Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
Strong experience with EDR/XDR solutions such as Microsoft Defender for Endpoint and CrowdStrike Falcon.
Experience building detections and hunting use cases using KQL, Sigma, YARA, or similar technologies.
Strong understanding of the MITRE ATT&CK Framework, Cyber Kill Chain, and modern adversary TTPs.
Proficiency in Python, PowerShell, or Bash for automation and integrations.
Solid knowledge of Windows, Linux, Active Directory, Entra ID, Identity Security, Networking, and Azure/AWS cloud environments.
Experience with security automation, orchestration, and incident response processes.
Preferred Certifications
Microsoft Security Certifications (SC-200, SC-100, SC-300)
CrowdStrike Falcon Administrator or Falcon Responder
Certifications GCIH, GCDA, GCTI, or CTIA
CISSP (preferred)
Key Competencies
Strong analytical and investigative mindset with a passion for cyber defence.
Excellent problem-solving and critical-thinking skills.
Ability to communicate technical concepts to both technical and non-technical stakeholders.
Strong collaboration and stakeholder management skills.
Passion for continuous learning and staying ahead of the evolving threat landscape.
Benefits
Benefits which make us unique
At EZ, we know that great people are what makes a great firm. We value our people and offer employees a comprehensive benefits package. Learn more about what working at Egon Zehnder can mean for you!
Benefits Highlights:
5 Days working in a Fast-paced work environment
Work directly with the senior management team
Reward and Recognition
Employee friendly policies
Personal development and training
Health Benefits, Accident Insurance
Potential Growth for you!
We will nurture your talent in an inclusive culture that values diversity. You will be doing regular catchups with your Manager who will act as your career coach and guide you in your career goals and aspirations.
Location
The position is based at Egon Zehnder’s KCI office in Gurgaon, Plot no. 29, Institutional Area Sector 32.
EZIRS Commitment to Diversity & Inclusion
Egon Zehnder Information Research & Services (EZIRS) aims for a diverse workplace and strive to continuously lead with our firm values. We respect personal values of every individual irrespective of race, national or social origin, gender, religion, political or other opinion, disability, age and sexual orientation as warranted by basic rights enshrined in the UN Declaration of Human Rights. We believe diversity of our firm is central to the success and enables us to deliver better solutions for our clients. We are committed to creating an inclusive environment and supportive work environment, where everyone feels comfortable to be themselves and treated with dignity and respect and there is no unlawful discrimination related to employment, recruitment, training, promotion or remuneration.
Egon Zehnder is an Equal Opportunity Employer
Egon Zehnder provides equal employment opportunities to all applicants and employees without regard to race, color, creed, religion, sex, sexual orientation, gender identity, marital status, citizenship status, age, national origin, disability, or any other legally protected status and to affirmatively seek to advance the principles of equal employment opportunity.