Role & responsibilities

This role is responsible for the design, operation, and continuous monitoring of cybersecurity technology controls across enterprise IT environments. The Cybersecurity SME Technology will work closely with the CISO, IT Infrastructure, Digital Applications, SOC, and GRC teams to ensure that security tools are effectively deployed, configured, monitored, and aligned with regulatory and business requirements.

The role requires a handson, technofunctional security professional with a strong understanding of modern security technologies and how they support compliance, risk reduction, and incident response.

Key Responsibilities:

- Own and manage enterprise cybersecurity technology controls across endpoints, networks, identities, cloud, and data environments.
- Implement, operate, and optimize security solutions including:
- Endpoint Detection & Response (EDR)
- Data Loss Prevention (DLP)
- Active Directory / Identity & Access Management (IAM)
- Firewalls (NGFW) and Network Security Controls
- Secure Web Gateway / Zscaler
- SIEM and SOAR platforms
- SOC operations
- DAST & Infra Vulnerability Assessment & Penetration Testing (VAPT)
- Ensure security tool configurations align with policies, risk assessments, and compliance requirements defined by the GRC function.
- Act as the technical SME during:
- Security incidents
- Investigations
- Root cause analysis
- Postincident corrective actions
- Drive log ingestion, correlation, alert tuning, and usecase development within SIEM and SOAR platforms.
- Oversee endpoint hardening, patching validation, and vulnerability remediation activities.




- Coordinate internal and external VAPT exercises and ensure timely closure of findings.
- Work with IT and Digital teams to embed security controls into:
- Applications
- Cloud platforms
- Infrastructure changes
- Support SOC maturity improvements, playbook development, and continuous monitoring enhancements.
- Provide periodic security posture reports and dashboards to the CISO covering:
- Control effectiveness
- Tool coverage gaps
- Incident trends and metrics
- Assist during audits and assessments by providing technical evidence and control demonstrations.
- Contribute to security architecture reviews for new initiatives, tools, and integrations.

Technical Skills & Tools:

- Endpoint Security: EDR/XDR platforms (Defender, SentinelOne or similar)
- Network Security: Firewalls, IDS/IPS, VPNs, Secure Web Gateways
- Identity & Access: Active Directory, IAM, MFA, Privileged Access concepts
- Data Security: DLP, Encryption, Data Classification
- Monitoring & Response: SIEM, SOAR, SOC operations
- Cloud & SaaS security exposure is a strong plus
- Vulnerability Management: Scanning tools, VAPT coordination, remediation tracking.

Certifications (Preferred, Not Mandatory):

- CEH, Security+, CySA+
- Vendor certifications (Microsoft Security, Zscaler, Palo Alto, Fortinet, etc.)
- Any SIEM / SOAR platform certification

Key Competencies:

- Robust handson technical depth with a practical, problemsolving mindset
- Ability to translate technical security controls into business risk language
- Comfortable working in highpressure incident scenarios
- Good stakeholder management across IT, Compliance, Digital, and Business teams
- Continuous learning attitude with curiosity across evolving security technologies

📌 IT - Cyber Security SME (Hyderabad)
🏢 Granules India
📍 Hyderabad