Cybersecurity Support & Implementation L3

Careers; Mumbai; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Careers is seeking an experienced Cybersecurity Support & Implementation L3 to bolster security operations, monitoring, and governance. The role demands 8 years of hands-on cybersecurity experience across SOC, endpoint security, threat detection, and incident management, with cloud/email/network security emphasis.

The candidate will lead security strategy, implement advanced protections, and coordinate with IT, DevOps, and management to embed security into product development and operations.

Qualifications

• 8 years of cybersecurity experience.
• Hands-on expertise in SOC operations, endpoint security, threat detection, incident management, and security governance.

Responsibilities

• Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.
• Establish and improve Security Incident Response, Threat Detection, and Threat Intelligence capabilities.
• Manage endpoint security, EDR/XDR, NG-AV, vulnerability management, patch management, and security hardening.
• Monitor and respond to cyber threats including ransomware, phishing, malware, credential attacks, insider threats, and advanced persistent threats; implement and manage SIEM, SOAR, EDR, vulnerability management, and other security technologies.
• Design and implement SASE architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.
• Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation, and perimeter defense.
• Implement micro-segmentation strategies to reduce lateral movement risks across data centers, cloud, and hybrid environments.
• Oversee email security solutions, including anti-phishing, anti-spam, DMARC/DKIM/SPF enforcement, and advanced threat protection.
• Lead email security implementation and migration projects, including transition from legacy gateways to modern cloud-based email security platforms.
• Implement and manage DSPM and DLP solutions across cloud, SaaS, endpoints, email, and network channels.
• Conduct security assessments, vulnerability assessments, risk assessments, and security audits.
• Strengthen security controls across cloud, network, servers, endpoints, applications, and data layers.
• Define and maintain cybersecurity policies, procedures, incident-response playbooks, and operational runbooks.
• Ensure compliance with applicable cybersecurity regulations, standards, and frameworks.
• Work with IT, engineering, product, DevOps, and management to embed security into development.
• Lead cybersecurity incident investigations, root-cause analysis, containment, eradication, and recovery.
• Establish cybersecurity KPIs, dashboards, risk reports, and management-level security reporting.
• Manage relationships with MSSPs, security vendors, auditors, and external cybersecurity partners.
• Conduct security awareness and incident-response training for employees and stakeholders.
• Continuously evaluate emerging threats and countermeasures.

Skills

SOC operations

Endpoint security

Threat detection

Incident response

Cloud security

Email security

Network security

DLP

Vulnerability management

Security frameworks

SASE

ZTNA

CASB

EDR/XDR

Security governance

Job description

**++Cybersecurity Support & Implementation L3++**

**++About the Role++**

We are looking for an experienced Cybersecurity Support & Implementation L3 to strengthen our cybersecurity operations, security monitoring, incident response, endpoint protection, and security governance.

The ideal candidate will have 8 years of experience in cybersecurity, with hands-on expertise in SOC operations, endpoint security, threat detection, incident management, cloud security, Email security, Network Security, DLP, vulnerability management, and security frameworks.

**++Key Responsibilities++**

• Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.
• Establish and improve Security Incident Response, Threat Detection, and Threat Intelligence capabilities.
• Manage endpoint security, EDR/XDR, NG-AV, vulnerability management, patch management, and security hardening.
• Monitor and respond to cyber threats including ransomware, phishing, malware, credential attacks, insider threats, and advanced persistent threats. Implement and manage SIEM, SOAR, EDR, vulnerability management, and other security technologies.
• Design and implement SASE (Secure Access Service Edge) architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.
• Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation, and perimeter defense.
• Implement micro-segmentation strategies to reduce lateral movement risks across data centers, cloud, and hybrid environments.
• Oversee email security solutions, including anti-phishing, anti-spam, DMARC/DKIM/SPF enforcement, and advanced threat protection.
• Lead email security implementation and migration projects, including transition from legacy gateways to modern cloud-based email security platforms.
• Implement and manage Data Security Posture Management (DSPM) solutions to discover, classify, and protect sensitive data across cloud and SaaS environments.
• Implement and govern Data Loss Prevention (DLP) solutions across endpoints, email, cloud, and network channels.
• Conduct security assessments, vulnerability assessments, risk assessments, and security audits.
• Strengthen security controls across cloud, network, servers, endpoints, applications, and data layers.
• Define and maintain cybersecurity policies, procedures, incident-response playbooks, and operational runbooks.
• Ensure compliance with applicable cybersecurity regulations, standards, and frameworks.
• Work closely with IT, engineering, product, DevOps, infrastructure, and management teams to embed security into technology and product development.
• Lead cybersecurity incident investigations, root-cause analysis, containment, eradication, and recovery.
• Establish cybersecurity KPIs, dashboards, risk reports, and management-level security reporting.
• Manage relationships with MSSPs, security vendors, auditors, and external cybersecurity partners.
• Conduct security awareness and incident-response training for employees and relevant stakeholders.
• Continuously evaluate emerging cyber threats, technologies, vulnerabilities, and attack techniques and recommend appropriate countermeasures.

Required Experience & Skills

• 8 years of overall IT/cybersecurity experience.
• Strong experience managing SOC / Security Operations.
• Strong understanding of SIEM, SOAR, EDR/XDR, endpoint security, network security, vulnerability management, and incident response.
• Hands-on experience with SASE, email security platforms, DLP, DSPM, and microsegmentation technologies.
• Experience in email security implementation and migration projects (on-prem to cloud or legacy to modern platforms).
• Strong understanding of cybersecurity frameworks, policies, risk management, and compliance.
• Strong understanding of Windows/Linux security and enterprise infrastructure.
• Experience with cloud security, preferably AWS/Azure.
• Strong understanding of networking, firewalls, VPNs, IDS/IPS, IAM, DLP, email security, and security monitoring.
• Experience with threat intelligence, malware analysis, forensic investigation, and security incident management.
• Understanding of IoT/OT/connected-device security is desirable.
• Strong analytical, problem-solving, communication, and stakeholder-management skills.
• Ability to lead cybersecurity teams and manage external security partners.

**++Preferred Certifications++**

• CISM
• CEH
• CompTIA Security
• ITIL
• AWS/Azure Security certifications
• OEM Certifications

**++Key Success Metrics++**

• SOC monitoring and incident-response effectiveness.
• Endpoint, network, and data security posture improvement.
• Successful implementation of EDR/ XDR, SASE, micro-segmentation, DSPM, and DLP controls.
• Email security effectiveness and successful migration execution.
• Vulnerability remediation and patch compliance.
• Cybersecurity audit and regulatory compliance.
• Implementation of Security-by-Design across technology and engineering teams.
• Improvement in organizational cyber resilience and security awareness.