Job Description

LOCATION-Bangalore, Sarjapur Road. 

Scope: As an L3 Security Engineer, you will be responsible for designing, implementing, and maintaining advanced security solutions to prote ct our organization from cyber threats. You will work closely with the security leadership to assess vulnerabilities, analyze security risks, and develop strategies to mitigate potential threats. Additionally, you will be responsible for mentoring and providing technical guidance to junior members of the security team. Key Responsibilities- Security Architecture and Design: Design, implement, and maintain advanced security solutions, including firewalls, intrusion detection/prevention systems, VPNs, and endpoint security technologies. Conduct security assessments and develop recommendations for improving the organization's security posture. Incident Response and Management: Lead the incident response process, including detection, analysis, containment, eradication, recovery, and lessons learned. Collaborate with cross-functional teams to investigate and respond to security incidents. Threat Intelligence and Research: Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and attack techniques. Conduct threat intelligence research to identify emerging risks and trends. Policy and Compliance: Ensure that security policies, standards, and procedures align with industry best practices and regulatory requirements. Conduct security assessments and audits to ensure compliance with relevant standards (e.g.,ISO 27001, NIST, GDPR). Security Awareness and Training: Provide security awareness training to employees and educate them about best practices for information security. Develop and conduct security training programs for internal teams. Mentoring and Leadership: Provide technical guidance and mentorship to junior members of the security team. Act as a subject matter expert and provide escalation support for complex security incidents. Qualifications: Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience). 10+ years of experience in information security, with a focus on designing and implementing security solutions. In-depth knowledge of network security, endpoint security, firewalls, IDS/IPS, VPNs, and security protocols. Experience with security assessment tools and techniques. Experience with Microsoft Defender products Strong understanding of industry regulations and compliance standards. Certifications: CISSP, CISM, CEH, etc., as applicable Preferred Experience and Skills- Experience with cloud security (AWS, Azure, GCP). Knowledge of DevSecOps and secure coding practices. Knowledge of IT security concepts, ISO 27001, ITIL, risk management Microsoft Defender products Sensitive and attentive to operation details, numbers Familiarity with threat hunting and security analytics. Hands on experience with Microsoft Azure, Intune, Conditional Access, MDM, MAM Hands on experience with scripting languages like PowerShell, VBScript, etc. Professional qualifications in information security such as CISSP, CCSP, CISA, CISM, CEH, ISO 27001 is a plus. Excellent communication and interpersonal skills. Organized, Systematic, and Consistent in daily work. Mandatory Skills- Microsoft Azure, Intune, Conditional Access; Scripting languages like PowerShell, VBS (any one); Experience in Information Security, with a focus on designing and implementing security solutions.; In-depth knowledge of Network Security, Endpoint Security, Firewalls, IDS/IPS, VPNs, and Security Protocols; Security assessment tools and techniques along with industry regulations and compliance standards; Experience in Microsoft Defender products. Preferred Skills- Professional qualifications in information security such as CISSP, CCSP, CISA, CISM, CEH, ISO 27001; IT Security Concepts, ISO 27001, ITIL, Risk Management; DevSecOps and Secure Coding Practices