Key Responsibilities
Define and enforce security controls across infrastructure, endpoints, and internal systems
Oversee vulnerability management, patching, system hardening, and secure configurations
Review security for internal tools and platforms; implement secure coding practices and automated scans
Drive endpoint protection (EDR/XDR), MDM, DLP, and identity management (SSO, MFA, PAM)
Secure enterprise networks through VPNs, firewalls, NAC, and zero-trust architecture
Lead SOC operations for incident detection, response, and root cause analysis
Optimize security tooling (SIEM, SOAR, threat intel) and automate detection and response workflows
Ensure alignment with ISO 27001, SOC 2, and NIST; support audits and compliance efforts
Mentor and lead security engineers and analysts; collaborate with IT, Engineering, HR, Legal, and GRC Required
Skills & Qualifications
Proven experience securing Windows/Linux environments, cloud infrastructure (AWS/Azure), and SaaS platforms
Strong knowledge of EDR/XDR, SIEM/SOAR tools (e.g., CrowdStrike, Splunk)
Familiarity with zero trust, network segmentation, identity security, and PAM solutions
Solid understanding of incident response lifecycle, threat hunting, and threat intel frameworks (MITRE ATT&CK, etc.)
Strong scripting or automation skills (Python, Bash, PowerShell) is a big plus
Certifications preferred: CISSP, OSCP, CISM, GCIA, or equivalent hands-on experience
Preferred Education and Experience
B-Tech or M-Tech in Computer Science or a related technical discipline from a reputed university.
9+ years in information security with deep hands-on exposure to infrastructure, network, or SOC environments
