Experience

8–12+ years in Cybersecurity Operations, Endpoint Security Architecture, and Incident Response (Enterprise SOC / MSSP / Telecom-grade SOC preferred)

Role Objective

The L3 End Point Security Engineer serves as the senior technical authority and strategic escalation point for endpoint, server, and network access security. This role owns architecture decisions, advanced investigations, detection strategy, threat response leadership, and continuous improvement across End Point Security services.

L3 is responsible for ensuring that people, tools, detection logic, and response processes operate at enterprise-grade maturity and align with business, compliance, and contractual SLAs.

Key Responsibilities

Enterprise AV / EDR Strategy & Advanced Threat Response

(SentinelOne / Trend Micro / Trellix)

Interested share your cv on [email protected]

Act as final technical escalation authority for critical endpoint security incidents

Lead investigation of:

o

Advanced persistent threats (APT)

o

Ransomware campaigns

o

Insider threats

Multi-stage endpoint attacks

Design and optimize EDR detection strategies, response workflows, and containment models

Review and approve:

EDR policies

Exclusions

Automated response actions

Trend Micro Deep Security – Architecture & Control Ownership

Own Deep Security architecture and hardening strategy

Define:

Anti-malware policies

IPS rule sets

Integrity Monitoring baselines

Ensure alignment with:

Compliance requirements (ISO, PCI, SOC,



DPDP, etc.)

Secure server builds standards

Guide tuning and performance optimization at scale

Support audits, risk assessments, and regulatory reviews

File Integrity Monitoring (FIM) – Governance & Risk Alignment

Define FIM governance model (what, where, why to monitor)

Map FIM use-cases to:

Threat scenarios

Compliance controls

Validate critical incidents for potential compromise

Lead forensic interpretation of integrity violations

Ensure alert relevance, reduced noise, and audit readiness

Network Access Control (ClearPass Aruba)

Act as SME for NAC security architecture

Define posture assessment and enforcement strategies

Lead investigation of:

Compromised endpoints

Repeated access anomalies

Rogue / non-compliant device events

Required Skills & Expertise

Technical Expertise

Advanced endpoint threat detection & response

Malware, ransomware, and exploit chain analysis

MITRE ATT&CK; mapping & kill-chain analysis

Endpoint + NAC + SIEM correlation

Incident command and crisis handling

Platforms

Expert-level experience with multiple EDR platforms

Trend Micro Deep Security advanced configuration

ClearPass Aruba architecture

SIEM & threat intelligence integration

Certifications (Highly Desired)

GCED / GCIA / GCIH

Advanced EDR vendor certifications

Incident Response / Digital Forensics

Interested Share your CV on

Pay: ₹600,000.00 - ₹800,000.00 per year

Work Location: In person

📌 Security End Point Security (India)
🏢 ATS trade FZCO
📍 India