Sales Engineer / Solutions Architect, BFSI

What you would own

• Demo to a SOC lead and a CISO in the same meeting, at two different altitudes, without losing either one.
• Scope and run the proof of concept yourself. Stand up the deployment, get their FortiGate, Trellix, Cortex, Active Directory and core banking logs flowing, and prove detection on their data rather than on our demo tenant.
• Answer the questions that actually decide BFSI deals: the RBI cyber security framework, SEBI CSCRF, CERT-In six hour reporting, DPDP, data residency, and where a given log sits at rest.
• Own the technical scorecard in an RFP or a head to head evaluation, and win it.
• Write the architecture and integration sections of the response, and the runbook the customer’s own team uses after go live.
• Bring the field back to engineering. You will be talking to the people who write the code, in the same week, not filing a request.

A week that goes well

Monday you are at a private bank in BKC walking their SOC lead through why an alert that three other tools called low severity is the top item on our board. Wednesday you are on their floor with one of their engineers, getting syslog off an ePO server that has never been asked to forward anything to anyone. Thursday the CISO asks whether any of this leaves India, and you answer the question properly instead of deflecting it. Friday you tell our engineering team that a parser is dropping a field their SOC cares about, and it is fixed before the next proof of concept starts.

What we are looking for

• You have personally run a SIEM or XDR proof of concept inside an Indian bank, NBFC, insurer or market infrastructure. Not scoped it from a deck. Run it.
• You can read a log, write a query, and follow a detection from raw event to alert. A terminal, Linux and containers are ordinary to you.
• You can hold a regulatory conversation with a CISO without reaching for a slide.
• You can say no to a bad fit deal in front of a sales team that wants it.
• Mumbai based, and content to spend a lot of the week on customer sites.

Useful, not required

• Depth in QRadar, Splunk, Securonix, Sentinel or Cortex XSIAM, from either side of the table.
• Time spent in a SOC before you moved into presales.
• Kubernetes, and deployments where the network was constrained or absent.
• Having survived a bake off you lost, and knowing exactly why.

Compensation and logistics

Market competitive base with a variable component, plus equity that is meaningful for a founding hire. We share the range and the equity detail on the first call rather than after four rounds.

Mumbai based, on site with customers, reporting to the founder.

How we hire

1. A 30 minute call with the founder. You get the honest version of stage, runway and pipeline, and you should ask for it.
2. A working session. We hand you a real customer environment sketch and you scope the proof of concept out loud. No slides, no take home exercise.
3. A technical deep dive with engineering on the product as it actually is, with access to a live instance.
4. Two reference conversations of your choosing, then an offer. The whole process fits inside two weeks if we both move.