Job Title: Trend Micro Deep Security Manager (DSM) - L1

Role Overview: We are looking for an L1 Security Administrator with hands-on experience in enterprise security operations, Trend Micro Deep Security Manager (DSM), and firewall technologies such as Palo Alto and Check Point. The candidate will be responsible for security monitoring, first-level troubleshooting, incident handling, standard operational activities, and coordination with L2/L3 teams to ensure the security and availability of enterprise infrastructure.

Key Responsibilities

Trend Micro Deep Security / DSM

- Monitor Trend Micro Deep Security Manager (DSM) and security alerts.

- Monitor the health and status of protected servers and Deep Security Agents.

- Perform first-level troubleshooting of agent connectivity and communication issues.

- Monitor alerts related to Anti-Malware, Intrusion Prevention, Integrity Monitoring, Firewall, and Web Reputation (where applicable).

- Perform basic checks on security policies and protection status.

- Check and troubleshoot unhealthy, inactive, or disconnected Deep Security Agents.

- Support agent deployment, activation, and deactivation activities as per approved procedures.

- Perform standard security policy-related activities under L2 guidance.

- Collect logs and required technical information for L2/L3 troubleshooting.

- Support planned DSM and agent maintenance activities.

Firewall – Palo Alto & Check Point

- Monitor Palo Alto and Check Point firewalls using available monitoring and management tools.

- Perform first-level troubleshooting of firewall-related connectivity issues.

- Check firewall interface, tunnel, session, and connectivity status.

- Perform basic checks of security policies and traffic logs.

- Analyze basic traffic logs to identify allowed, denied, or dropped traffic.

- Perform initial troubleshooting of application connectivity issues.





- Check VPN/tunnel status and escalate issues where required.

- Support standard firewall changes under L2 supervision.

- Collect relevant logs and technical information for L2/L3 investigation.

- Monitor firewall health, CPU, memory, interfaces, and HA status.

Security Monitoring & Incident Management

- Monitor security alerts and events from DSM, Palo Alto, Check Point, and other security monitoring tools.

- Respond to security incidents within defined SLAs.

- Perform initial analysis and determine the appropriate escalation.

- Create and update security incident/service tickets with accurate troubleshooting details.

- Resolve incidents within the defined L1 scope.

- Escalate complex or critical security incidents to L2/L3 teams.

- Participate in major incident calls and security bridge calls when required.

- Maintain proper incident updates until resolution.

Network & Security Troubleshooting

- Perform basic troubleshooting using Ping, Traceroute, Telnet/Port connectivity checks, DNS checks, and basic packet/log analysis.

- Identify whether an issue is related to server, network, firewall, or security controls.

- Coordinate with Network, Server, Application, and L2 Security teams.

- Perform initial investigation of blocked application traffic.

- Collect source IP, destination IP, port, protocol, timestamps, and relevant logs for troubleshooting.

Monitoring & Operational Support

- Perform regular health checks of DSM, Palo Alto, and Check Point environments.

- Monitor firewall and security device availability.

- Monitor firewall HA status and report failover conditions.

- Perform daily/shift-wise security health checks.

- Maintain shift handover reports and operational records.

- Follow approved SOPs, security procedures, and escalation matrices.

- Support planned maintenance and emergency security activities.

- Maintain security documentation and operational checklists.

📌 Trend Micro Deep Security Manager (DSM) (Mumbai)
🏢 Neev
📍 Mumbai