About the job
Job Title: Cybersecurity Engineer
Shift Timing: Rotational
Work Mode: Remote, India
Role Overview:
We are on the lookout for a seasoned Cybersecurity Engineer with over 10 years of hands-on experience in designing and implementing robust endpoint security solutions. This role emphasizes expertise in endpoint security architecture, Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Data Loss Prevention (DLP), and File Integrity Monitoring (FIM). The primary focus will be on the architecture, deployment, configuration, optimization, and ongoing maintenance of security platforms, with no involvement in Security Operations Center (SOC) functions, threat detection, or incident response.
Key Responsibilities:
1. Endpoint Security & EDR Engineering
· Design, implement, configure, and sustain enterprise-grade endpoint security solutions, including EDR/EPP tools such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, and Symantec.
· Establish and enforce endpoint security configuration baselines across diverse operating systems including Windows, macOS, and Linux.
· Oversee agent deployment and maintain health checks, policy adjustments, updates, and lifecycle management utilizing tools like Intune, SCCM, GPO, or automated scripts.
· Collaborate with other security platforms to integrate endpoint telemetry for enhanced visibility.
2. Data Loss Prevention (DLP) – Engineering & Lifecycle Management
· Architect, implement, and oversee enterprise-wide DLP solutions including Microsoft Purview DLP, Forcepoint DLP, and Proofpoint Information Protection.
· Configure DLP policies, establish detection classifiers, endpoint rules, cloud controls, and data handling workflows.
· Manage DLP agents and infrastructure components, ensuring alignment with compliance and regulatory standards through tuning and upgrades.
3. Network Detection & Response (NDR) Engineering
· Architect, deploy, and maintain NDR solutions such as Corelight, Darktrace, and ExtraHop Reveal.
· Configure SPAN/TAP feeds, cloud sensors, and traffic ingestion pipelines effectively.
· Ensure comprehensive sensor coverage, manage policy configurations, perform version upgrades, and optimize performance.
4. File Integrity Monitoring (FIM) – Design, Deployment & Maintenance
· Develop, implement, and maintain file integrity monitoring solutions across the enterprise.
