Senior Security Engineer 2

Role & responsibilities

Senior Security Engineer II

Location: Bangalore

Purpose / Profile

As a Senior Security Engineer II at Infra Market, you will help reduce enterprise risk by safeguarding the organizations digital assets from cyber threats. You will work closely with the Security Operations Center to continuously monitor, analyze, and respond to security alerts and events. You will collaborate directly with the greater Information Security team to ensure compliance with industry regulations, standards, and best practices, as well as educate employees on proper cyber hygiene. You will help guarantee the confidentiality, integrity, and availability of the organizations network and compute resources and aid in shaping strategies to reduce cyber risk.

Essential Functions

• Provide timely detection and identification of possible attacks/intrusions and distinguish findings from benign activities.
• Correlate incident data to identify specific vulnerabilities and make recommendations that enable prompt containment and remediation.
• Coordinate with the greater organization to resolve cyber incidents.
• Provide technical summaries of findings in accordance with established reporting procedures.
• Escalate and triage incidents that may cause an immediate impact to the organization.
• Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats.
• Perform event correlation to gain situational awareness and to determine the effectiveness of an observed attack.
• Assist in the development and implementation of security policies and procedures.
• Track and document cyber incidents from initial detection through final resolution.
• Assist in reducing risk by actively identify areas of non-compliance and making recommendations for improvement.

Key Responsibilities -

Network & Endpoint Security Solutions Management:

• Managed Defender for Endpoint Security: Protects 3500+ devices (Windows and Mac) from cyber threats through advanced threat protection, vulnerability management, and incident response.
• Managed Microsoft Defender for Cloud Security: Secures servers in the Azure, AWS and GCP cloud, providing continuous threat detection, vulnerability assessment, and security recommendations.
• Managed TrendMicro Antivirus for servers in Third party cloud, providing continuous threat detection and security incident and recommendation.
• Managing and tracking defender for Endpoint secure score, taking actions to increase it according to industry standards, and monitoring new score improvements to align with ISO 27001 & best practices.
• Develop action plans to enhance the secure score by addressing security gaps across the organizations endpoints.
• Maintaining critical security policies, including antivirus, attack surface reduction (ASR), USB restrictions, and real-time monitoring.
• Access provisioning and deprovisioning for URLs and USB through end point security
• Monitor & Response security alerts, incidents, and generated by Defender for Endpoint and defender for cloud
• Analyse and investigate potential security incidents and respond quickly to contain and mitigate threats.
• Architect and manage enterprise-wide endpoint protection strategies, ensuring compliance with industry standards.
• Implement advanced endpoint detection and response (EDR) solutions, maintaining policies and configurations to protect against evolving threats.
• Lead the incident response process for endpoint breaches, performing forensic analysis and remediation.
• Design, implement, and oversee advanced network security solutions, including firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS).
• Conduct thorough risk assessments and vulnerability management to identify and remediate security gaps.
• Monitor network traffic continuously, analyzing logs for unusual activities and responding to incidents swiftly.
• Helpdesk NOC Monitoring: Monitors and resolves IT issues across India using the Zabbix monitoring tool, ensuring smooth operation of IT infrastructure and services.
• Helpdesk NOC Ticket Assignment: Monitor and assign tickets to agents across India
• Pan India IIL Payments: Manages payments for various telecom and IT service providers across India (Airtel, Jio, TTSL, TCL, Manage IT, Tescom)
• Preparing Security reporting for Network & Security team for weekly and monthly review meetings.
• Monthly handling 1500+tickets in Network & Security.

Preferred candidate profile

• Bachelors in computer science, Information Systems, Cybersecurity, or Software Engineering.
• 6-8 years of relevant experience in cybersecurity or information technology.
• 3+ years of hands-on experience with an EDR/XDR solution, SEG, SIEM and Fortinet.

Licences and Certifications

• One or more technical or cybersecurity certification preferred (e.g., SSCP, MS SC200, NSE 4, CCNA)