Monitoring, administration, configuration & troubleshooting of Security appliances (Firewalls, VPN, Antivirus, IPS/IDS, Deep security, Deep discovery inspector, Email Gateway & other security devices)

• Experience in Fortinet, Sophos Firewalls/VPN/IPS/IDS/Proxy, Email Gateway & other security devices.

• Performs daily monitoring, verifying the integrity and availability of hardware, resources, systems, key processes, system, application & appliance logs, verifying completion of scheduled jobs. Take corrective action in timely manner.

• Analyze security alerts and escalate critical incident to OEM / SIs / In-house Incident Response teams.

• Ensuring daily monitoring & maintenance of security devices including backup & restoration to achieve operational effectiveness

• Triage and respond to security incidents (e.g., malware infections, phishing, unauthorized access).

• Assist in containment, eradication, and recovery steps.

• Maintain incident tickets and documentation.

• Monitor EDR/XDR alerts (e.g., CrowdStrike, Defender for Endpoint).

• Perform packet capture analysis or network traffic analysis.

• Ensure proper log collection and normalization from different sources (firewalls, IDS, servers).

• Prepare reports and dashboards on security posture.





• Perform installations, patches, upgrades, capacity planning and performance tuning.

• Perform fault and problem management Security equipment’s.

• Support day to day Security operations & support upcoming Security projects • Ability to identify and mitigate network vulnerabilities.

• Ability to identify and mitigate network vulnerabilities.

• Investigate security alerts and provide incident response & reports.

• Keep up to date with the latest security and technology developments research/evaluate emerging security threats and ways to manage them

• Monitor for attacks, intrusions and unusual, unauthorized activity.

• Monitor and implement government advisories / notification time-to-time in IT setting.

• Coordinate with external agencies for vulnerability assessment / penetration testing related matters and fix the issues in support with internal / external team members.

• Coordination with stakeholders in relation to security issues and provide future recommendations.

• Prepare and circulate Cyber Security related advisory communication to organizational users.

• Excellent problem-solving skills.

• Good interpersonal and communication skills.

📌 IT Security Operation Engineer / Cyber Security Engineer (India)
🏢 3i Infotech
📍 India