Role - Security Engineer

Required Technical Skill Set** - SIEM, UEBA, SOAR, Endpoint Security, Threat Intelligence, Privileged Access Management, Host-based security solutions,SIEM, SOAR,UEBA, EDR, DLP, PAM, Email Security,Firewall, Anti-Apt, VAPT,Application Security,WAF, Defense-In Depth, Zero Trust

Desired Competencies (Technical/Behavioral Competency/Skills) Must-Have** - • Administer, configure, and optimize ArcSight SIEM including connectors, parsers, correlation rules, dashboards, and reports.

- Monitor security events, alerts, and incidents through SIEM and ensure timely triage and response.
- Develop and fine-tune correlation rules, Use Cases, and anomaly detection models.

• Leverage ArcSight UEBA platforms to detect behavioral anomalies and insider threats.
- Integrate and operationalize external & internal threat feeds into TIP threat intel frameworks (STIX/TAXII)

Perform IOC enrichment, threat scoring, and automate intelligence workflows. Build and maintain ArcSight SOAR playbooks to automate security incident response processes.
- Collaborate with SOC, IR, and other teams for coordinated response actions.
- Deploy, administer, and troubleshoot Checkpoint Harmony EDR solutions.
- Manage Trend Micro Deep Security HIPS, host-based firewall policies, and OS-level hardening.
- Conduct endpoint threat hunting and malware behavioral analysis.
- Ensure application security controls, secure configuration, patching & vulnerability remediation.
- Manage enterprise Fortinet AV platforms.
- Create/update policies, signatures, and analyze malware events.
- Respond to outbreaks and perform root-cause analysis.
- Implement and administer Arcon PAM tools.
- Manage workflows for privileged access, session monitoring, vaulting, and password rotation.

- Conduct periodic access reviews and ensure least privilege

. • Working knowledge of Zscaler ZTA/ZPA and Zero Trust architectures (ZTNA, identity-centric access, continuous verification).
- AppSec fundamentals: OWASP Top 10, API Security Top 10, SAST/DAST tooling, secure coding patterns and SBOM practices.

- Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA,



Container Security) • Perform network-level vulnerability assessments by Tenable on servers, network devices, firewalls, routers, switches, databases, and OS components.
- Deploy, configure, and manage Fortinet Anti-APT platforms such as Trend Micro Deep Discovery, Fortinet ATP, or similar enterprise APT solutions.

• Manage APT platforms (e.g., sandboxing, detonation, behavioral analytics); integrate telemetry with SIEM/SOAR.
- Monitor and analyze advanced threat alerts, sandbox reports, and malicious payload behavior.
- Configure endpoint, network, Application and Email Forcepoint DLP policies, tune classifiers and dictionaries.

- Investigate Forcepoint DLP events, reduce false positives, and coordinate with data owners for remediation.
- Operate FortiRecon dark Web/deep web monitoring tools and services to detect leaked credentials, source code, access tokens, customer data, and brand impersonations.
- Correlate findings with SIEM/UEBA and trigger SOAR playbooks for credential resets, takedowns, and stakeholder notifications. • Hands-on experience with ArcSight SIEM (use cases, parsers, rules, dashboards).
- Administer and optimize ArcSight (SmartConnectors, parsers, correlation rules, dashboards, reports).
- Deploy, configure, and manage enterprise Thales HSM.
- Implement and manage 42Gears MDM/EMM/MTD solution for enterprise mobility security.
- Integrate 42Gears Mobile Threat Defense (MTD) to detect malware, phishing, network-based attacks, and OS vulnerabilities using behavioral and ML-based analysis.
- Implement F5 Anti-DDoS appliances in HA mode at DC perimeter/gateway.
- Configure behavior-based DDoS detection with sub-second response. • Strong expertise in Checkpoint Harmony, Trend Micro HIPS, Fortinet AV,



Arcon PAM, Force point DLP, TrendMicro DDEI Email Security, IBM Guardian DAM, Fortinet UTM, Zscaler Zero Trust, Thales HSM, 42Gears MDM/EMM/MTD and Application Security technologies.

• Experience in SOAR playbook development and security automation.
- Understanding of networking, OS internals, malware behavior, and threat intelligence.

- Familiarity with MITRE ATT&CK;, NIST, ISO 27001, TTP and other security frameworks.
- Solid analytical, investigative, and documentation skills.
- Operate Trend Micro DDEI email security (BEC, spoofing controls, sandboxing; DMARC/DKIM/SPF hygiene).

Good to Have - SIEM, UEBA, SOAR, Endpoint Security, Threat Intelligence, Privileged Access Management, and Application/Host-based security solutions. This role requires strong technical expertise in ArcSight SIEM, EDR, DLP, PAM, Email Security, Anti Apt, WAF, Application Security, Defense-In Depth, Zero Trust and other enterprise security technologies Responsibility of / Expectations from the Role** -

1. Administer, configure, and optimize ArcSight SIEM, ArcSight UEBA, ArcSight SOAR playbooks including connectors, parsers, correlation rules, dashboards, and reports.

1. AppSec fundamentals: OWASP Top 10, API Security Top 10, SAST/DAST tooling, secure coding patterns and SBOM practices. Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA, Container Security). Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA, Container Security)
2. Perform network-level vulnerability assessments by Tenable on servers, network devices, firewalls, routers, switches, databases, and OS components.
3. Strong expertise in Checkpoint Harmony, Trend Micro HIPS, Fortinet AV, Arcon PAM, Force point DLP, TrendMicro DDEI Email Security, IBM Guardian DAM, Fortinet UTM, Zscaler Zero Trust, Thales HSM, 42Gears MDM/EMM/MTD and Application Security technologies.
4. Familiarity with MITRE ATT&CK;, NIST, ISO 27001, TTP and other security frameworks.
5. Operate Trend Micro DDEI email security (BEC, spoofing controls, sandboxing; DMARC/DKIM/SPF hygiene).

📌 Security Engineer(4-5 Years) (Delhi)
🏢 Tata Consultancy Services
📍 Delhi