L2 Security Operations Engineer - End Point Security
Experience
5+ years in SOC, Endpoint Detection & Incident Response
Role Objective

Network Access Control - ClearPass Aruba

Investigate advanced NAC incidents and repeated violations

Lead response for compromised or rogue endpoints

Advise on posture policies, strategies, and improvements

Correlate NAC events with endpoint and SIEM data

SOC Leadership & Continuous Improvement

Serve as technical escalation authority for L1 teams

Develop and improve SOPs, runbooks, and detection playbooks

Support SOC maturity initiatives (use-case enhancement, automation inputs)

Lead incident war rooms and stakeholder communication (technical bridge)

Provide expert input for RFPs, audits, and customer reviews

Skills & Expertise





Technical

Advanced endpoint threat analysis & IR

Robust malware/ransomware understanding

MITRE ATT&CK; mapping

Endpoint forensic fundamentals

Cross-domain correlation (Endpoint + NAC + SIEM)

Tools

Multiple EDR platforms

SIEM threat correlation

Threat intelligence feeds

Incident response documentation frameworks

Certifications (Strongly Preferred

CEH / GCED / GCIA

Vendor Advanced EDR certifications

Incident Response or Digital Forensics certifications

Pay: ₹400,000.00 - ₹650,000.00 per year

Work Location: In person

📌 Security Operations Engineer (Mumbai)
🏢 ATS trade FZCO
📍 Mumbai