Job Purpose
• Endpoint Protection: Design, implement, and manage endpoint security solutions (antivirus, EDR, firewalls & also understanding into Active Directory, Networking).
• Monitoring & Incident Response: Continuously monitor endpoint activity for security incidents; respond to and investigate security breaches.
• Policy Development: Develop and enforce security policies and procedures for endpoint devices.
• Threat Analysis: Conduct threat assessments and vulnerability assessments to identify potential security risks.
• User Training: Provide training and support to employees on best security practices.
• Collaboration: Work closely with IT teams to integrate security into system architecture and operations.
• Reporting: Generate reports on endpoint security status, incidents, and compliance for management.
Duties and Responsibilities
A- Minimum required Accountabilities for this role

• Engineering / Computer Graduate with 3-5 years of Information / Cyber Security Experience

B- Additional Accountabilities pertaining to the role

• Relevant Security Certifications like CEH, CISSP, CISM, ISO 27001 Lead Implementer, etc. preferred (Valuable to Have)
Key Decisions / Dimensions
• Strategic Decisions
• Deciding encryption policies for different device categories (laptops, desktops, servers).
• Define the problem clearly
• Security Audits preparedness
• Deciding compliance enforcement policies for non-compliant or unencrypted devices.
Major Challenges
• Managing BitLocker encryption compliance across thousands of enterprise devices.
• Handling BitLocker recovery key management and recovery incidents securely.
• Ensuring endpoint security without impacting user productivity or system performance.
• Handling encryption deployment during OS upgrades and device refresh cycles.




• Maintaining compliance with organizational and regulatory security standards.
• Supporting audit requirements and maintaining accurate security documentation.
Required Qualifications and Experience
a) Qualifications
• Engineering/Computer Graduates with relevant security experience of 3-5years
• Work Experience
• Experience with endpoint protection and EDR solutions such as Microsoft Defender for Endpoint, Symantec, TrendMicro.
• Monitored and investigated endpoint security alerts using EDR platforms.
• Performed real-time analysis of suspicious processes, files, network connections, and user activities.
• Investigated malware, ransomware, phishing, and other endpoint security incidents.
• Conducted threat hunting across endpoints to identify indicators of compromise (IOCs).
• Analyzed process trees, command-line activity, registry changes, persistence mechanisms, and suspicious behaviors.
• Triaged and prioritized security alerts based on severity, impact, and threat intelligence.
• Contained compromised endpoints by isolating systems and terminating malicious processes.
• Performed root-cause analysis and incident investigation to determine attack vectors.
• Created and maintained detection rules, indicators, exclusions, and prevention policies.
• Used MITRE ATT&CK; techniques to map and understand attacker behavior.
• Investigated endpoint telemetry and correlated events with SIEM logs for deeper analysis.
• Supported incident response activities including containment, eradication, and recovery.
• Prepared detailed incident reports and documented investigation findings.
• Collaborated with SOC, network, cloud, and IT teams to resolve security incidents.
• Improved detection coverage by identifying gaps and tuning EDR policies to reduce false positives.
• Followed security procedures and escalation processes for critical and high-severity incidents.•

📌 Senior Software Engineer (Pune)
🏢 Bajaj Finance
📍 Pune