Experience: 5–10 years in network and information security

Role Overview:

We are looking for a hands-on and experienced IT & Cyber Security Expert to strengthen and manage our organization's network, infrastructure, and information security environment.

The role will be responsible for developing and implementing security frameworks, managing enterprise firewalls and network security, securing Windows and Linux environments, administering Active Directory, conducting security audits, monitoring threats, and responding to security incidents.

The ideal candidate should have strong practical experience in network administration, cyber security, infrastructure security, vulnerability management, and security compliance.

Key Roles & Responsibilities:

1. Cyber Security Strategy & Architecture

· Develop and implement cyber security policies, standards, procedures, and controls.

· Assess existing IT infrastructure and identify security vulnerabilities and gaps.

· Develop and maintain a prioritized cyber security improvement roadmap.

· Design secure network architecture with appropriate segmentation, access controls, and defense-in-depth mechanisms.

· Establish and maintain security best practices across IT infrastructure.

2. Network & Firewall Security

· Configure, manage, monitor, and optimize enterprise firewalls such as Fortinet, Palo Alto, Sophos, Cisco ASA, or pfSense.

· Conduct regular firewall rule reviews, optimization, and clean-up.

· Design and manage VLANs, inter-VLAN routing, and network segmentation.

· Manage VPNs, IDS/IPS, web filtering, NAC, and other network security controls.

· Monitor network traffic and troubleshoot network connectivity, security, and performance issues.

· Work with switches, routers, wireless networks, and other network infrastructure.

3. Active Directory & Identity Management

· Administer and secure Microsoft Active Directory, Group Policy, DNS, DHCP, OUs, and trust relationships.

· Implement least-privilege access and role-based permissions.

· Manage privileged and administrative accounts.

· Implement and maintain MFA and password security policies.

· Manage employee account lifecycle processes, including joiners, movers, and leavers.

· Regularly review user access and permissions.

4. Security Audits & Compliance

· Conduct internal security audits, vulnerability assessments, configuration reviews, and security assessments.

· Coordinate with external auditors,



penetration-testing teams, and security consultants.

· Track security findings and ensure timely remediation.

· Maintain security documentation, risk registers, audit evidence, and compliance records.

· Support compliance with security frameworks such as ISO 27001, NIST CSF, and CIS Controls.

· Maintain awareness of applicable Indian cyber-security and data-protection requirements, including relevant CERT-In directions and DPDP Act requirements.

5. Windows & Linux Security

· Secure and harden Windows Server and Linux environments, including Ubuntu and RHEL/CentOS.

· Implement security hardening based on CIS benchmarks and industry best practices.

· Manage patching, antivirus/EDR, system logging, and backup security.

· Monitor server and endpoint security posture.

· Automate administrative and security tasks using PowerShell, Bash, or Python.

6. Security Monitoring & Incident Response

· Implement and manage centralized logging and SIEM solutions such as Wazuh, Splunk, Microsoft Sentinel, or ELK.

· Monitor security events, investigate alerts, and identify potential threats.

· Respond to cyber-security incidents and coordinate containment and remediation.

· Conduct root-cause analysis and post-incident reviews.

· Develop and maintain Incident Response, Business Continuity, and Disaster Recovery plans.

7. Vulnerability Management

· Conduct regular vulnerability assessments and configuration reviews.

· Work with tools such as Nessus, Qualys, OpenVAS, Nmap, Burp Suite, and Metasploit.

· Prioritize vulnerabilities based on risk and business impact.

· Coordinate with IT and application teams for remediation and closure.

· Maintain vulnerability reports and remediation records.

8. Security Awareness & Collaboration

· Conduct cyber-security awareness sessions and phishing simulations for employees.

· Educate employees on password security, phishing, social engineering, data protection, and secure IT practices.

· Work closely with IT, development, operations, and business teams to implement secure solutions.





· Review the security aspects of new applications, infrastructure, cloud services, and technology implementations.

· Communicate security risks and recommendations clearly to technical and non-technical stakeholders.

Required Skills & Qualifications

· Bachelor's degree in Computer Science, IT, Electronics, Cyber Security, or a related field, or equivalent practical experience.

· 5 years of hands-on experience in network administration and cyber security.

· Strong knowledge of:

o TCP/IP o Routing & Switching o VLANs o VPNs o DNS & DHCP o Wireless Security o Network Segmentation

· Strong hands-on experience with enterprise firewall configuration and management.

· Excellent knowledge of Active Directory and Group Policy.

· Strong administration and security-hardening experience with Windows Server and Linux.

· Experience with vulnerability assessment and penetration-testing tools.

· Working knowledge of SIEM, EDR, centralized logging, and security monitoring.

· Understanding of ISO 27001, NIST CSF, CIS Controls, and security audit practices.

· Ability to write scripts using PowerShell, Bash, or Python.

· Strong analytical, troubleshooting, documentation, and communication skills.

· Ability to independently manage security projects and infrastructure improvements.

Preferred Qualifications

· Relevant certifications such as:

o CCNA / CCNP Security o CEH o CompTIA Security o CISSP o CISA o OSCP o Fortinet NSE o PCNSE o Other relevant vendor security certifications

· Experience securing AWS, Microsoft Azure, or Microsoft 365 / Entra ID environments.

· Knowledge of Zero Trust Architecture.

· Experience with email security controls including SPF, DKIM, and DMARC.

· Experience in infrastructure, telecom, transportation, or a similar industry.

· Experience in establishing security processes and controls in a growing organization.

Key Competencies

· Network & Infrastructure Security

· Cyber Security Architecture

· Firewall & VPN Management

· Active Directory & Identity Security

· Vulnerability Management

· Security Audits & Compliance

· SIEM & Security Monitoring

· Incident Response

· Windows & Linux Security

· Risk Assessment & Management

· Security Automation

· Problem Solving & Troubleshooting

· Stakeholder Management

Pay: ₹800,000.00 - ₹1,200,000.00 per year

Work Location: In person

📌 Cyber Security Engineer (Gurugram)
🏢 Superwave Communication and Infrasolution
📍 Gurugram