Job Overview:

BRAVE is seeking an L2 Operations Engineer - Malware Tools to support endpoint protection platforms, investigate malicious activity, and remediate endpoint security incidents in a 24x7 operational workplace.

Key Responsibilities:

- Provide 24x7x365 monitoring, alert triage, risk rating, and incident resolution for endpoint protection tools.

- Triage, diagnose, and resolve endpoint security incidents escalated from L1/L1.5; escalate unresolved items to L3 with deep technical findings.

- Install, maintain, patch, and manage endpoint protection agents and consoles across Windows client systems.

- Handle phishing alerts, mail security reports, and work alongside client security teams for mitigation.

- Integrate and troubleshoot key secrets using Azure Key Vault and manage identity/endpoint cross-tower operations with DLP, Hosting, and IDAM teams.

- Participate in RCA reviews, alert tuning to reduce noise,



and keep ServiceNow tickets and SOP documentation up-to-date.

- Write operational scripts using PowerShell or Python for administrative automation.

Required Skills & Experience:

- 12 years of core L2 operational experience in Endpoint Security and Malware Investigation.

- Expertise with CrowdStrike Falcon, Microsoft Defender for Endpoint, RSA, Phishing tools, and Azure Key Vault.

- Experience with SIEM/SOAR platforms (e.g., Splunk) and Windows OS security management.

- Experience in a 24x7 operational support model following standard ITSM framework.

- Strong English communication skills for incident writing and security reporting.

Preferred Certifications:

- CrowdStrike Falcon Administrator

- Microsoft SC-200 (Security Operations Analyst)

- CompTIA Security+

📌 Operations Engineer - Malware Tools & Endpoint Protection (Gurugram)
🏢 Brave Futures
📍 Gurugram