Job Title: Trend Micro Deep Security Manager (DSM) - L2

Role Overview: We are looking for an L2 Security Administrator with strong hands-on experience in enterprise security infrastructure, Trend Micro Deep Security Manager (DSM), and firewall technologies including Palo Alto and Check Point. The candidate will be responsible for security administration, configuration, troubleshooting, policy management, incident response, upgrades, optimization, and maintaining the security posture of enterprise infrastructure across data centres.

Key Responsibilities

Trend Micro Deep Security / DSM Administration

- Configure, administer, and manage Trend Micro Deep Security Manager (DSM).

- Manage and troubleshoot Deep Security Agents across Windows and Linux servers.

- Configure and maintain security policies based on server and application requirements.

- Manage and troubleshoot: Anti-Malware, Intrusion Prevention, Integrity Monitoring, Firewall, and Web Reputation (where applicable).

- Create, modify, and maintain security rules and policies.

- Troubleshoot agent activation, communication, synchronization, and policy-related issues.

- Manage Deep Security Agent deployment, upgrades, and lifecycle activities.

- Monitor DSM and agent health, performance, and protection status.

- Troubleshoot DSM services, database, communication, and connectivity issues.

- Analyze security events and take appropriate corrective actions.

- Tune security policies to balance security, application requirements, and system performance.

Palo Alto Firewall Administration

- Configure, administer, and troubleshoot Palo Alto firewalls.

- Manage security policies, NAT policies, zones, interfaces, and routing.

- Analyze traffic logs, threat logs, system logs, and configuration issues.

- Troubleshoot application connectivity and firewall policy-related issues.

- Configure and troubleshoot VPN/IPSec tunnels where applicable.

- Monitor firewall CPU, memory, sessions, interfaces, and overall health.

- Troubleshoot and manage firewall HA environments.

- Perform firewall policy reviews and optimization.

- Support firewall upgrades, configuration backups, and maintenance activities.

- Perform packet-level troubleshooting using available Palo Alto tools.

Check Point Firewall Administration





- Configure, administer, and troubleshoot Check Point firewalls.

- Manage security policies, NAT, objects, services, and access rules.

- Analyze Check Point logs and security events.

- Troubleshoot application connectivity, traffic-related, and VPN issues.

- Monitor firewall health and HA status.

- Support policy installation and validation.

- Perform configuration backup and restoration activities.

- Support Check Point upgrades and maintenance activities.

- Perform firewall rule review and optimization.

Security Incident Management & RCA

- Handle and troubleshoot L2 security incidents related to DSM, Palo Alto, and Check Point.

- Analyze malware, IPS, firewall, and security events.

- Investigate blocked or abnormal network/application traffic.

- Perform detailed troubleshooting and identify root cause.

- Identify false positives and implement appropriate security policy/rule adjustments.

- Perform Root Cause Analysis (RCA) for recurring or critical security incidents.

- Implement corrective and preventive actions.

- Coordinate with L1, Network, Server, Application, SOC, and L3 Security teams.

- Provide technical support during critical security incidents and major incident calls.

Security Policy & Rule Management

- Review and implement firewall rules based on approved business/application requirements.

- Configure and maintain security policies on Palo Alto and Check Point.

- Review existing firewall rules for security and operational effectiveness.

- Identify unused, duplicate, or unnecessary rules and recommend cleanup.

- Configure NAT policies and troubleshoot NAT-related connectivity issues.

- Review security logs to validate firewall policy behaviour.

- Implement approved security changes following change management procedures.

- Ensure changes are properly documented and validated.

Network Security Troubleshooting





- Troubleshoot complex connectivity issues across network, firewall, server, and application layers.

- Analyze traffic flows using firewall logs and packet captures.

- Troubleshoot TCP/IP, routing, DNS, NAT, VPN, and application connectivity issues.

- Coordinate with Network and Server teams to identify end-to-end connectivity problems.

- Identify whether traffic is blocked by firewall policy, routing, server configuration, or security controls.

- Provide technical recommendations for recurring connectivity and security issues.

Vulnerability & Server Security

- Support server security hardening activities.

- Coordinate vulnerability remediation with Server and Application teams.

- Analyze vulnerabilities and recommend appropriate mitigation controls.

- Implement virtual patching/IPS protection through Trend Micro where applicable.

- Verify security protection after server patching and application changes.

- Troubleshoot security-related application performance or connectivity issues.

Upgrade, Backup & Maintenance

- Plan and execute Trend Micro DSM and Deep Security Agent upgrades.

- Support Palo Alto and Check Point firewall upgrades.

- Perform configuration backups and restoration activities.

- Validate compatibility and operational readiness before upgrades.

- Conduct post-upgrade health checks and validation.

- Support firewall HA/failover testing, as well as DR and security infrastructure recovery activities.

- Maintain upgrade, rollback, backup, and recovery procedures.

Monitoring & Security Operations

- Monitor overall security posture of the enterprise workplace.

- Review security dashboards, logs, alerts, and compliance status.

- Identify recurring issues and recommend security improvements.

- Prepare security reports and operational metrics.

- Maintain security documentation, SOPs, policies, and configuration records.

- Support security audits and compliance activities.

- Provide technical guidance and support to L1 resources.

- Work closely with Network, Server, Storage, Application, SOC, and L3 Security teams.

Tips: Provide a summary of the role, what success in the position looks like, and how this role fits into the organization overall.

📌 Trend Micro Deep Security Manager (DSM) (Mumbai)
🏢 Neev
📍 Mumbai