: Sr. Cyber Security Engineer

Job Title: Senior Cyber Security Engineer

Reporting To: Head of IT

Location: Moti Nagar, New Delhi

Experience Level: 7–8 Years

Employment Type: Full time

Job Purpose

We are looking for a hands-on Senior Cyber Security Engineer with 7 to 8 years of dedicated experience to manage and strengthen our enterprise security operations and defence architecture. Reporting directly to the Head of IT, you will take end-to-end operational ownership of our cybersecurity stack—covering full-lifecycle management of EDR/XDR, DLP, Secure Web Gateway/Websense, Patching, and Network Security controls.

You will lead vulnerability assessments across our hybrid IT landscape, correlate cyber threat intelligence, investigate security alerts, and execute incident remediation across all endpoints, servers, and branch locations.

Key Responsibilities

1. Endpoint Detection & Incident Response (EDR / XDR)

- Administer, tune, and manage the complete lifecycle of enterprise EDR solutions (e.g., SentinelOne, CrowdStrike Falcon, or Microsoft Defender for Endpoint).
- Investigate behavioural alerts, detect anomalous end-user behaviour, contain ransomware/malware outbreaks, and isolate compromised hosts.
- Conduct root cause analysis (RCA), build automated remediation scripts, and maintain host-level hardening baselines.

2. Data Loss Prevention (DLP) & Web Security

- Own the deployment, policy tuning, and incident triage for enterprise DLP across endpoints, networks, and cloud/email channels to prevent unauthorized data exfiltration.
- Manage Websense / Forcepoint Web Security (SWG) or cloud proxy solutions: enforce URL filtering, SSL inspection, acceptable use policies, and defend against malicious web-borne traffic.
- Handle user violation escalations in coordination with internal IT, compliance, and management teams.

3.



Network & Infrastructure Defense

- Manage perimeter and internal network security controls on Next-Generation Firewalls (Fortinet FortiGate, Palo Alto Networks, or Cisco Firepower/ASA).
- Monitor and tune IDS/IPS rules, inspect VPN connections (Site-to-Site and Remote Access), and verify strict network segmentation (VLANs/subnets) across head office and branch networks.
- Ensure secure communication channels and monitor encrypted egress/ingress traffic.

4. Landscape Vulnerability Assessment & Patch Management

- Execute recurring vulnerability scans across workstations, physical/virtual servers, network gear, and cloud environments using tools like Tenable Nessus, Qualys, or Rapid7.
- Prioritize Common Vulnerabilities and Exposures (CVEs) based on business impact and drive SLA-backed remediation.
- Oversee end-to-end automated OS and third-party software patch management cycles (via Microsoft Intune, SCCM/MECM, or ManageEngine Endpoint Central).
- Track Zero-Day alerts and coordinate emergency out-of-band hotfix rollouts.

5. Threat Intelligence & Landscape Monitoring

- Ingest and operationalize cyber threat intelligence (CTI) from trusted feeds, ISACs, OSINT, and MITRE ATT&CK; frameworks.
- Ingest Indicators of Compromise (IoCs) and Indicators of Attack (IoAs) into detection platforms to proactively block emerging campaign vectors.




- Review daily security dashboards and report operational security risk posture directly to the Head of IT.

Technical Skills & Toolsets

- EDR / XDR: SentinelOne, CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black.
- Data Loss Prevention (DLP): Forcepoint DLP, Symantec DLP, Digital Guardian, or Microsoft Purview.
- Web Gateway / Proxy: Websense / Forcepoint Web Security, Zscaler (ZIA), Cisco Umbrella.
- Vulnerability Management: Tenable Nessus, Qualys VMDR, Rapid7 InsightVM.
- Threat Intelligence & SIEM/Logging: AlienVault OTX, VirusTotal Enterprise, MISP, Splunk, Microsoft Sentinel.
- Patch Management: Microsoft Intune / SCCM, ManageEngine Patch Manager Plus / Endpoint Central.
- Network Security: Fortinet FortiGate, Palo Alto Networks, Cisco Firewalls/Routers/Switches.
- Scripting & OS: PowerShell, Bash, Python; deep familiarity with Windows Server, Active Directory, and Linux.

Candidate Profile & Qualifications

- Education: B.Tech / B.E. / MCA / B.Sc in Computer Science, Information Technology, Cybersecurity, or related field.
- Experience: 7–8 years of direct, hands-on experience in enterprise cybersecurity operations, SOC engineering, or network security.
- Mindset: Strong troubleshooting ability under incident pressure, collaborative approach when working with IT infrastructure leads, and structured documentation skills.
- Certifications (Preferred):
- Certified Information Systems Security Professional (CISSP) or CompTIA Security+ / CySA+
- Certified Ethical Hacker (CEH) / GIAC Certified Incident Handler (GCIH)
- Vendor certifications: Fortinet NSE 4+, SentinelOne Administrator, or Microsoft SC-200 / AZ-500

Interested candidate can speak with Riya (phone hidden) and share your resume at [email protected]. Pay: ₹40,000.00 - ₹70,000.00 per month

Work Location: In person

📌 Senior Cyber Security Engineer - Delhi (Moti Nagar)
🏢 The Sachdev Group
📍 Moti Nagar