Cyber Security Engineer - Endpoint Detection & Response

Experience : 25 Years

Location : Pune (Onsite)

Domain : Infrastructure Engineering & Cybersecurity

Key Responsibilities :

- Core Systems Engineering: Maintain and optimize Windows Server and Desktop environments, ensuring stability, performance, and adherence to security baselines.

- Security Integration: Apply a Cybersecurity mindset to all engineering tasks, focusing on hardening operating systems and mitigating vulnerabilities within the Windows ecosystem.

- Automation & Scripting: Develop and maintain scripts using PowerShell or C# to automate routine administrative tasks, deployment workflows, and security remediation.

- EDR Management: Provide hands-on administration of Endpoint Detection and Response (EDR) products (e.g., CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint), including agent deployment, policy tuning, and health monitoring.

- Incident Support: Collaborate with the SOC team to investigate endpoint-related alerts and provide technical deep dives into system logs and registry changes.

Required Skills & Qualifications:

- Windows Expertise: Strong foundational knowledge of Windows OS internals, Active Directory, Group Policy Objects (GPOs), and NTFS permissions.

- Scripting Proficiency: Practical experience writing and debugging PowerShell (preferred) or C# code to interact with system APIs and automate tasks.

- EDR Operations: Direct experience managing an enterprise-grade EDR platform, specifically focusing on agent health, exclusions, and threat hunting.

- Security Awareness: Familiarity with cybersecurity frameworks (like MITRE ATT&CK) and an understanding of how attackers exploit Windows systems.

- Problem Solving: Ability to troubleshoot complex OS-level issues and provide root cause analysis (RCA).

Preferred Qualifications:

- Certifications such as Microsoft Certified: Windows Server Hybrid Administrator Associate or CompTIA Security+.

- Experience with configuration management tools (e.g., SCCM/MECM or Intune).

- Understanding of cloud-hybrid environments (Azure AD/Entra ID).

What We Offer:

- Opportunity to work in a security-first engineering culture.

- Hands-on exposure to the latest cybersecurity tools and enterprise technologies.

- A collaborative team environment located in the heart of Punes tech hub.