Job Title: Trend Micro Deep Security Manager (DSM) - L1

Role Overview: We are looking for an L1 Security Administrator with hands-on experience in enterprise security operations, Trend Micro Deep Security Manager (DSM), and firewall technologies such as Palo Alto and Check Point. The candidate will be responsible for security monitoring, first-level troubleshooting, incident handling, standard operational activities, and coordination with L2/L3 teams to ensure the security and availability of enterprise infrastructure.

Key Responsibilities

Trend Micro Deep Security / DSM

-

Monitor Trend Micro Deep Security Manager (DSM) and security alerts.

-

Monitor the health and status of protected servers and Deep Security Agents.

-

Perform first-level troubleshooting of agent connectivity and communication issues.

-

Monitor alerts related to Anti-Malware, Intrusion Prevention, Integrity Monitoring, Firewall, and Web Reputation (where applicable).

-

Perform basic checks on security policies and protection status.

-

Check and troubleshoot unhealthy, inactive, or disconnected Deep Security Agents.

-

Support agent deployment, activation, and deactivation activities as per approved procedures.

-

Perform standard security policy-related activities under L2 guidance.

-

Collect logs and required technical information for L2/L3 troubleshooting.

-

Support planned DSM and agent maintenance activities.

Firewall – Palo Alto & Check Point

-

Monitor Palo Alto and Check Point firewalls using available monitoring and management tools.

-

Perform first-level troubleshooting of firewall-related connectivity issues.

-

Check firewall interface, tunnel, session, and connectivity status.

-

Perform basic checks of security policies and traffic logs.

-

Analyze basic traffic logs to identify allowed, denied, or dropped traffic.

-

Perform initial troubleshooting of application connectivity issues.

-





Check VPN/tunnel status and escalate issues where required.

-

Support standard firewall changes under L2 supervision.

-

Collect relevant logs and technical information for L2/L3 investigation.

-

Monitor firewall health, CPU, memory, interfaces, and HA status.

Security Monitoring & Incident Management

-

Monitor security alerts and events from DSM, Palo Alto, Check Point, and other security monitoring tools.

-

Respond to security incidents within defined SLAs.

-

Perform initial analysis and determine the appropriate escalation.

-

Create and update security incident/service tickets with accurate troubleshooting details.

-

Resolve incidents within the defined L1 scope.

-

Escalate complex or critical security incidents to L2/L3 teams.

-

Participate in major incident calls and security bridge calls when required.

-

Maintain proper incident updates until resolution.

Network & Security Troubleshooting

-

Perform basic troubleshooting using Ping, Traceroute, Telnet/Port connectivity checks, DNS checks, and basic packet/log analysis.

-

Identify whether an issue is related to server, network, firewall, or security controls.

-

Coordinate with Network, Server, Application, and L2 Security teams.

-

Perform initial investigation of blocked application traffic.

-

Collect source IP, destination IP, port, protocol, timestamps, and relevant logs for troubleshooting.

Monitoring & Operational Support

-

Perform regular health checks of DSM, Palo Alto, and Check Point environments.

-

Monitor firewall and security device availability.

-

Monitor firewall HA status and report failover conditions.

-

Perform daily/shift-wise security health checks.

-

Maintain shift handover reports and operational records.

-

Follow approved SOPs, security procedures, and escalation matrices.

-

Support planned maintenance and emergency security activities.

-

Maintain security documentation and operational checklists.

📌 Trend Micro Deep Security Manager (DSM) (Mumbai)
🏢 Recognized
📍 Mumbai