Kindly read the carefully and attend the interview only if your experience and skills align with the role requirements.

We are looking for immediate to 15 days joiners.

Education: Engineering or any tech background only

Location: Bangalore

Experience: 3-8 years

Job Title: Sr Security Administrator

Location: Bangalore

Experience: 3-8 Years

Shift: 24/7

Job Brief

We are looking for a dedicated and detail-oriented Sr Security Administrator to join our cybersecurity team, responsible for the end-to-end administration of the organization's endpoint protection, vulnerability management, and web/internet security infrastructure. This role owns the day-to-day operations, tuning, and lifecycle management of Antivirus, EDR/XDR, patch and vulnerability management, and secure web gateway/SASE platforms, ensuring endpoints, servers, and internet-facing traffic are continuously protected, monitored, and compliant with organizational security policy.

Key Responsibilities

- Administer, configure, and maintain Endpoint Detection & Response (EDR) / Extended Detection & Response (XDR) and Antivirus platforms (CrowdStrike Falcon, Trend Micro Apex One/Vision One) across desktops, servers, and cloud workloads.
- Monitor EDR/XDR and AV consoles for malware detections, policy violations, and suspicious endpoint behaviour; triage, contain, and remediate infected/compromised endpoints.
- Manage sensor/agent deployment, health, tamper protection, exclusions, and policy tuning to minimize false positives while maintaining detection efficacy.
- Own the vulnerability management lifecycle using Qualys (VMDR) asset discovery, authenticated scanning, vulnerability prioritization (Tru-Risk/CVSS), exception/waiver workflows, and remediation tracking with IT/infra teams.
- Plan, schedule, and monitor patch deployment cycles (OS, third-party applications)



in coordination with system administrators; track patch compliance and closure of Critical/High severity findings within SLA.
- Administer web proxy and secure web gateway solutions (Forcepoint Web Security / Fortinet SASE) URL/content filtering, SSL inspection, category and application policies, and internet access controls.
- Manage and maintain Zero Trust Network/Application Access (ZTSA) policies to enforce least-privilege, identity-aware access for remote and hybrid users.
- Investigate and respond to web/proxy-related security incidents (malicious URL access, C2 callbacks, policy bypass attempts) and coordinate blocking/remediation actions.
- Generate and maintain dashboards and reports for AV/EDR health, vulnerability posture, patch compliance, and web/proxy traffic for management and audit purposes.
- Perform periodic health checks, upgrades, and license/renewal tracking for AV, EDR/XDR, vulnerability management, and web proxy/SASE platforms.
- Support internal and external security audits, compliance assessments, and regulatory reviews (ISO 27001, PCI-DSS, RBI/DPDP, etc.) related to endpoint and web security controls.
- Document and continuously improve SOPs, runbooks, and playbooks for endpoint protection, patch/vulnerability management, and web proxy operations.
- Coordinate with OEM/vendor support teams for platform issues, upgrades, and escalations.
- Participate in on-call/shift rotations as required to support 24x7 security operations.

Required Skills & Experience

- Bachelor's degree in Computer Science,



Information Technology, or equivalent.
- 3–6 years of hands-on experience in endpoint security, vulnerability management, and web/proxy security administration.

Strong hands-on experience with the following tools/platforms:
- Antivirus / EDR / XDR: CrowdStrike Falcon, Trend Micro (Apex One / Vision One / Deep Security).
- Vulnerability & Patch Management: Qualys (VMDR, Tru-Risk, CSAM), patch management/WSUS or equivalent tools.
- Web Proxy / SASE / ZTSA: Forcepoint Web Security, Fortinet SASE (FortiSASE), Zero Trust Secure Access (ZTSA/ZTNA).
- Working knowledge of network protocols, OS security (Windows, Linux/Unix), and cloud environments (Azure, AWS).
- Understanding of malware behaviour, indicators of compromise (IOCs), and endpoint forensics fundamentals.
- Familiarity with SIEM/SOAR integration for endpoint and web-proxy log correlation.
- Knowledge of CVSS scoring, CVE prioritization, and risk-based vulnerability remediation approaches.
- Familiarity with ISO 27001, PCI-DSS, DPDP Act, RBI IT Framework, NIST, and OWASP standards.
- Basic scripting/automation skills (PowerShell/Python) for reporting and operational efficiency, preferred.

Soft Skills

- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent communication and cross-functional collaboration skills.
- Ability to manage multiple priorities and platforms in a fast-paced setting.
- Ownership mindset with attention to detail in policy configuration and reporting.
- Willingness to work in rotational shifts to support 24x7 operations.

Certifications (At least one mandatory)

- CrowdStrike Certified Falcon Administrator (CCFA)
- Trend Micro Certified Professional
- Qualys Certified Specialist (VM/VMDR)
- CompTIA Security+
- EC-Council Certified Incident Handler (ECIH) / Certified SOC Analyst (CSA)

📌 WALK-IN Interview For Senior Security Administrator (Bengaluru)
🏢 Indecomm
📍 Bengaluru