Job Location Mumbai Andheri East

Work Mode - Office , Rotational Shift

Experience

812+ years in Cybersecurity Operations, Endpoint Security Architecture, and Incident Response (Enterprise SOC / MSSP / Telecom-grade SOC preferred)

Role Objective

The L3 End Point Security Engineer serves as the senior technical authority and strategic escalation point for endpoint, server, and network access security. This role owns architecture decisions, advanced investigations, detection strategy, threat response leadership, and continuous improvement across End Point Security services.

L3 is responsible for ensuring that people, tools, detection logic, and response processes operate

at enterprise-grade maturity and align with business, compliance, and contractual SLAs.

Key Responsibilities

Enterprise AV / EDR Strategy & Advanced Threat Response

(SentinelOne / Trend Micro / Trellix)
- Act as final technical escalation authority for critical endpoint security incidents
- Lead investigation of:
- Advanced persistent threats (APT)
- Ransomware campaigns
- Insider threats




- Multi-stage endpoint attacks
- Design and optimize EDR detection strategies, response workflows, and containment models
- Review and approve:
- EDR policies
- Exclusions
- Automated response actions
- Drive post-incident root cause analysis (RCA) and risk reduction initiatives
- Interface with customer security leadership during major incidents

Trend Micro Deep Security Architecture & Control Ownership
- Own Deep Security architecture and hardening strategy
- Define:
- Anti-malware policies
- IPS rule sets
- Integrity Monitoring baselines
- Ensure alignment with:
- Compliance requirements (ISO, PCI, SOC, DPDP, etc.)
- Secure server builds standards
- Guide tuning and performance optimization at scale
- Support audits, risk assessments, and regulatory reviews

File Integrity Monitoring (FIM) Governance & Risk Alignment
- Define FIM governance model (what, where, why to monitor)
- Map FIM use-cases to:
- Th

📌 Opening ForSecurity Operations Engineer End Point Security Mumbai
🏢 AIS Technolabs
📍 Mumbai