Cybersecurity Engineer

Job Title: Cyber Security Engineer

Shift Timing- Rotational

Work mode- Remote, India

Role Overview:

We are seeking a Cyber Security Engineer with 10+ years of experience and strong expertise in endpoint security architecture, EDR, NDR, DLP, File Integrity Monitoring (FIM), and enterprise endpoint security controls.

This role focuses exclusively on design, deployment, configuration, tuning, and long-term maintenance of security platforms.
No SOC operations, threat detection, or incident response responsibilities.

Key Responsibilities:

1. Endpoint Security & EDR Engineering

·       Design, deploy, configure, and maintain enterprise endpoint security platforms, including:

o   EDR/EPP solutions: Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, Symantec

o   Endpoint security controls: AV, host firewall, device control, disk encryption, and vulnerability agents

·       Develop endpoint security configuration baselines and ensure consistent policy enforcement across Windows/macOS/Linux devices.

·       Manage agent deployment, health monitoring, policy tuning, updates, and lifecycle maintenance using tools such as Intune, SCCM, GPO, or automation scripts.

·       Integrate endpoint telemetry with other security platforms for visibility             

2. Data Loss Prevention (DLP) – Engineering & Lifecycle Management

·       Design, deploy, and maintain enterprise-wide DLP solutions such as (Microsoft Purview DLP (endpoint, cloud, email), Forcepoint DLP, Proofpoint Information & Email Protection, Zscaler / Cisco Umbrella DLP

·       Configure DLP policies, detection classifiers, endpoint rules, cloud controls, and data-handling workflows.

·       Manage DLP agents, infrastructure components, tuning, upgrades, and operational alignment with compliance/regulatory requirements.

3. Network Detection & Response (NDR) Engineering

·       Architect, deploy, configure, and maintain NDR solutions such as: (Corelight, Darktrace, ExtraHop Reveal)

·       Configure SPAN/TAP feeds, cloud sensors, routing integrations, and traffic ingestion pipelines.

·       Maintain sensor coverage, policy configurations, version upgrades, and performance optimization.

4. File Integrity Monitoring (FIM) – Design, Deployment & Maintenance

·       Implement and manage FIM platforms, including: (Tripwire, Qualys FIM, Wazuh, Defender, CrowdStrike)

·       Configure monitored directories, change detection rules, baselines, and exclusions.

·       Oversee FIM agent deployment, architecture, health, and maintenance across server and endpoint fleets.

5. Automation, Deployment & Platform Operations

·       Automate deployment, configuration updates, and system health checks using:

o   PowerShell, Python, Bash, API/Graph API

·       Perform ongoing platform operations such as patching, upgrading, tuning, and configuration auditing.

·       Maintain complete and up-to-date documentation including:

o   Architecture diagrams

o   Deployment methodology

o   Standard operating procedures

o   Version control and lifecycle plans