Cyber Security Admin

Innowell Engineering International; India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Innowell Engineering International seeks an experienced security professional to lead data protection, encryption and zero-trust initiatives across the organisation.

You will deploy and monitor security controls for web apps and perimeters, manage vulnerability scanning with Nessus/Qualys/Acunetix, and oversee SIEM/EDR/XDR across all user devices in India. The role focuses on secure VM provisioning, backups, and compliance.

Qualifications

• Experience in corporate infrastructure security with data protection focus.
• Hands-on with DLP, encryption, and zero-trust implementations.
• Strong vulnerability management and EDR/XDR tooling expertise.

Responsibilities

• Data protection & infrastructure security governance for the company.
• Website, web app and perimeter defense setup and monitoring.
• Proactive monitoring, vulnerability assessment, and compliance activities.

Skills

DLP & encryption

Zero trust

Vulnerability management

SIEM monitoring

EDR/XDR

Education

Bachelor's degree in IT/CS

Tools

Nessus

Qualys

Acunetix

Veeam

Cloudflare

AWS WAF

Fortinet

Palo Alto

Sophos

AD/Entra ID

Job description

Job Description

Roles & Responsibilities:

1. Company Data Protection & Infrastructure Security
   • Data Loss Prevention (DLP) & Encryption: Implement and manage strict DLP policies to monitor and prevent unauthorized data exfiltration via email, endpoints, or cloud storage. Ensure robust encryption for data at rest and data in transit.
   • Secure VM Provisioning & Hardening: Install and manage secure hypervisors (VMware ESXi, Hyper‑V, or Proxmox). Build and maintain hardened virtual machine templates (Windows/Linux) using CIS Benchmarks.
   • Immutable Backups & DR: Architect and test a bulletproof backup system (e.g., Veeam) utilizing air‑gapped or immutable cloud storage to guarantee instant data recovery in the event of a ransomware attack.
   • Identity & Zero Trust Access: Enforce a zero‑trust architecture leveraging Active Directory / Entra ID, strict Conditional Access policies, Single Sign-On (SSO), and mandatory Multi‑Factor Authentication (MFA) for all 300 employees.
2. Website, Web Application & Perimeter Defence
   • Web Application Firewall (WAF) & DDoS Mitigation: Deploy, tune, and manage a WAF (Cloudflare, AWS WAF, Akamai, or Sucuri) to completely safeguard our public website and apps from OWASP Top 10 vulnerabilities (SQLi, XSS, SSRF) and DDoS attacks.
   • SSL/TLS & Domain Security: Oversee strict SSL/TLS certificate lifecycles, enforce secure HTTP headers (HSTS, CSP), and manage domain security protocols (DNSSEC, SPF, DKIM, DMARC) to eliminate email spoofing and domain hijacking.
   • Next‑Gen Firewall (NGFW) & Micro‑Segmentation: Maintain core company firewalls (Fortinet, Palo Alto, or Sophos). Enforce strict network segmentation and micro‑segmentation to isolate critical data zones from standard employee traffic.
3. Proactive Monitoring, Vulnerability Assessment & Compliance
   • Vulnerability Scanning & VAPT: Conduct continuous automated network, server, and web application vulnerability scans using tools like Nessus, Qualys, or Acunetix. Analyze, prioritize, and immediately patch critical security vulnerabilities.
   • Centralized Logging & SIEM: Configure central log collection (SIEM) to actively monitor firewall logs, server access logs, and web traffic for anomalies or indicators of compromise (IoCs).
   • Endpoint Detection & Response (EDR): Manage EDR/XDR agents (CrowdStrike, Sentinel One, or Microsoft Defender for Endpoint) across all user devices to detect and isolate threats instantly.

Required Skills & Qualifications:

• Experience: Proven experience managing corporate infrastructure security, with a strong focus on data protection and web application security.
• Web & Network Expertise: Deep understanding of web protocols (HTTPS, DNS, CDN architectures) and hands‑on capability to secure public‑facing web servers (Nginx, Apache, IIS) and firewalls.
• Security Stack Mastery: Practical experience with EDR tools, Vulnerability Scanners, Cloud Security/WAF platforms, and Data Loss Prevention (DLP) strategies.
• Preferred (Fortinet firewall and Cisco network components)Operating Systems: High proficiency in securing and administering both Linux (Ubuntu, RHEL) and Windows Server environments.
• Preferred Certifications: Certified Ethical Hacker (CEH), CompTIA Security+, Cisco CCNA Security, AWS/Azure Security Engineer, or Fortinet NSE 4+.