Cyber Security Engineer

Cloudxtreme; Bengaluru; Hybrid; INR 2,500,000 - 3,500,000; Full time

Job summary

Cloudxtreme is seeking an experienced Security Operations Specialist to manage Cortex XDR and DLP deployments across multi-cloud and on‑premises. The role focuses on agent health, automation, and compliance with robust scripting using Python, PowerShell, or Bash.

You will work with SCCM, SUSE Manager, Red Hat Satellite, and GitLab pipelines, ensuring secure, updated endpoints and tight data protection. Bangalore-based, full-time, on-site role.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field
• 7-8 years of security operations, endpoint management, or IT support experience
• Hands-on experience with endpoint management tools (SCCM, SUSE Manager, Red Hat Satellite)
• Automation scripting in Python, PowerShell, or Bash
• Familiarity with Azure, GCP, and on‑prem infrastructure
• Strong analytical and incident response skills

Responsibilities

• Cortex XDR agent management across multi-cloud and on‑prem environments
• Troubleshoot agent health, performance, and connectivity issues
• Automate deployment, patching, and remediation using SCCM, SUSE Manager, Red Hat Satellite and GitLab pipelines
• Develop scripts (Python/PowerShell/Bash) for automation and compliance
• Ensure endpoints meet security compliance and keep Cortex XDR updated
• Collaborate with IT teams and perform regular environment audits
• Create documentation and reports on agent health and performance
• Configure and optimize DLP policies using Microsoft Defender for Cloud Apps and Purview
• Deploy and manage Microsoft Information Protection Scanner to classify and protect data

Skills

Cortex XDR

CrowdStrike

Security operations

Endpoint management

Education

Bachelor’s degree in Cybersecurity or IT

Tools

SCCM

SUSE Manager

Red Hat Satellite

GitLab pipelines

PowerShell

Python

Bash

Job description

Primary Skill Palo Alto Cortex XDR and Microsoft DLP

Secondary Skill – CrowdStrike

Level - SA

Location - Bangalore

Key Responsibilities:

Cortex XDR Agent Management

• Monitor and troubleshoot Cortex XDR agents across multi-cloud (Azure, GCP, OCI and IBM) and on-premises environments.
• Perform advanced troubleshooting to resolve issues related to agent health, performance, and connectivity.
• Ensure Cortex XDR agents are properly installed, configured, and updated on endpoints.

Endpoint Remediation & Automation

• Utilize tools such as SCCM, SUSE Manager, and Red Hat Satellite to automate agent deployment, patching, and remediation.
• Use GitLab CI/CD pipelines to automate repetitive tasks, improving efficiency and reducing manual errors.
• Develop and run scripts (Python, PowerShell, Bash) to streamline agent management and endpoint compliance.

System Compliance & Maintenance

• Ensure all endpoints meet security compliance standards, maintaining the latest Cortex XDR agent versions.
• Collaborate with other IT teams to resolve configuration issues and optimize system performance.
• Conduct regular audits of the environment to identify and address potential vulnerabilities.

Reporting & Documentation

• Create and maintain documentation for troubleshooting procedures, system configurations, and automation workflows.
• Generate reports on agent health, system performance, and compliance metrics for management review.

Data Loss Prevention (DLP) & Microsoft Defender

• Configure, manage, and optimize DLP policies using Microsoft Defender for Cloud Apps and Microsoft Purview (formerly Microsoft Information Protection).
• Monitor, analyze, and respond to DLP alerts, identifying potential data leaks or sensitive data exposures.
• Tune DLP policies and rules based on incident analysis to improve data protection accuracy and reduce false positives.

On-Premises Microsoft Information Protection (MIP) Scanner

• Deploy and manage the Microsoft Information Protection Scanner to classify, label, and protect sensitive data stored on on-premises file servers.
• Perform regular scans to detect and remediate data at risk, ensuring compliance with organizational policies.
• Troubleshoot and optimize scanner configurations for efficient data discovery and protection.

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience).
• 7-8 years of experience in security operations, endpoint management, or IT support.
• Hands-on experience with endpoint management tools like SCCM, SUSE Manager, Red Hat Satellite, and automation using GitLab pipelines.
• Proficiency in troubleshooting Windows and Linux systems.
• Basic to intermediate scripting skills (Python, PowerShell, or Bash) for automation and troubleshooting.
• Familiarity with cloud environments (Azure, GCP) and on-prem infrastructure.
• Strong analytical skills with a focus on problem-solving and incident response.

Preferred Skills:

• Experience with Cortex XDR or similar EDR platforms, Microsoft Purview DLP and CASB
• Understanding of cybersecurity principles and frameworks (e.g., NIST, ISO).
• Certifications like Palo Alto Networks PCNSA/PCNSE, CompTIA Security+, or equivalent are a plus.
• Ability to work independently and collaboratively in a dynamic environment.