Roles Responsibilities:

- Company Data Protection Infrastructure Security Data Loss Prevention (DLP) Encryption: Implement and manage strict DLP policies to monitor and prevent unauthorized data exfiltration via email, endpoints, or cloud storage. Ensure robust encryption for data at rest and data in transit.
- Secure VM Provisioning Hardening: Install and manage secure hypervisors (VMware ESXi, Hyper-V, or Proxmox). Build and maintain hardened virtual machine templates (Windows/Linux) using CIS Benchmarks.
- Immutable Backups DR: Architect and test a bulletproof backup system (e.g., Veeam) utilizing air-gapped or immutable cloud storage to guarantee instant data recovery in the event of a ransomware attack.
- Identity Zero Trust Access: Enforce a zero-trust architecture leveraging Active Directory / Entra ID, strict Conditional Access policies, Single Sign-On (SSO), and mandatory Multi-Factor Authentication (MFA) for all 300 employees.

- Web Application Firewall (WAF) DDoS Mitigation: Deploy, tune, and manage a WAF (Cloudflare, AWS WAF, Akamai, or Sucuri) to completely safeguard our public website and apps from OWASP Top 10 vulnerabilities (SQLi, XSS, SSRF) and DDoS attacks.
- SSL/TLS Domain Security: Oversee strict SSL/TLS certificate lifecycles, enforce secure HTTP headers (HSTS, CSP), and manage domain security protocols (DNSSEC, SPF, DKIM, DMARC) to eliminate email spoofing and domain hijacking.
- Next-Gen Firewall (NGFW) Micro-Segmentation: Maintain core company firewalls (Fortinet, Palo Alto, or Sophos). Enforce strict network segmentation and micro-segmentation to isolate critical data zones from standard employee traffic.

- Vulnerability Scanning VAPT:



Conduct continuous automated network, server, and web application vulnerability scans using tools like Nessus, Qualys, or Acunetix. Analyze, prioritize, and immediately patch critical security vulnerabilities.
- Centralized Logging SIEM: Configure central log collection (SIEM) to actively monitor firewall logs, server access logs, and web traffic for anomalies or indicators of compromise (IoCs).
- Endpoint Detection Response (EDR): Manage EDR/XDR agents (CrowdStrike, Sentinel One, or Microsoft Defender for Endpoint) across all user devices to detect and isolate threats instantly.

Required Skills Qualifications: Experience: Proven experience managing corporate infrastructure security, with a solid focus on data protection and web application security. Web Network Expertise: Deep understanding of web protocols (HTTPS, DNS, CDN architectures) and hands-on capability to secure public-facing web servers (Nginx, Apache, IIS) and firewalls. Security Stack Mastery: Practical experience with EDR tools, Vulnerability Scanners, Cloud Security/WAF platforms, and Data Loss Prevention (DLP) strategies. Preferred (Fortinet firewall and Cisco network components) Operating Systems: High proficiency in securing and administering both Linux (Ubuntu, RHEL) and Windows Server environments. Preferred Certifications: Certified Ethical Hacker (CEH), CompTIA Security+, Cisco CCNA Security, AWS/Azure Security Engineer, or Fortinet NSE 4+.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cyber Security Admin (Sivakasi)
🏢 Innowell Engineering
📍 Sivakasi