DTICI_CSOC_Endpoint Security Engineer_T9

Daimler Truck AG; Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Daimler Truck AG in Bengaluru is seeking an Endpoint Security Engineer for the CSOC team to monitor, investigate and respond to security incidents involving endpoints, using Microsoft Defender for Endpoint and SIEM tooling. You will collaborate with IT and IR teams to contain threats, remediate vulnerabilities, and implement hardening measures.

The role requires 2–4 years of cybersecurity experience with hands-on MDE experience, a bachelor's degree, and the ability to work in a hybrid

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or Engineering (or equivalent experience).
• 2–4 years of cybersecurity experience with strong exposure to endpoint security
• Hands‑on enterprise experience with Microsoft Defender for Endpoint is mandatory.
• Experience supporting medium‑severity security incidents is strongly preferred.

Responsibilities

• Investigate and respond to endpoint security incidents from detection through containment, remediation, and closure under defined CSOC processes.
• Monitor and analyze alerts generated from Microsoft Defender for Endpoint
• Coordinate with IT teams for vulnerability remediation, patch management, and secure configuration enforcement.
• Maintain accurate documentation for incidents, investigations, and response actions.

Skills

MDE expertise

MITRE ATT&CK familiarity

SIEM (Microsoft Sentinel)

Endpoint telemetry analysis

Incident response

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Job description

DTICI_CSOC_Endpoint Security Engineer_T9

Job Description

Key Tasks & Responsibilities:

Investigate and respond to endpoint security incidents from detection through containment, remediation, and closure under defined CSOC processes.

Perform in depth incident analysis to determine root cause, scope, severity, and business impact.

Monitor and analyze alerts generated from Microsoft Defender for Endpoint

Execute response actions such as device isolation, file quarantine, attack surface reduction actions, and indicator blocking.

Escalate complex or high‑severity endpoint incidents to IR team with structured analysis and supporting evidence.

Analyze endpoint telemetry including process execution, registry changes, file activity, and network connections.

Tune and refine endpoint security alerts, detection rules, and policies to reduce false positives and improve signal quality.

Support endpoint hardening initiatives including ASR rules, exploit protection, controlled folder access, and device control.

Coordinate with IT teams for vulnerability remediation, patch management, and secure configuration enforcement.

Maintain accurate documentation for incidents, investigations, and response actions.

Participate in post‑incident reviews and RCA sessions, contributing to corrective and preventive actions.

Provide technical guidance and knowledge sharing to L1/L2 SOC analysts on endpoint security topics.

Support audit, compliance, and internal review activities related to endpoint security operations.

Responsibilities

Key Skills:

Strong hands‑on experience with Microsoft Defender for Endpoint (MDE).

Working knowledge of theMicrosoft 365 Defender ecosystem, including Defender for Office 365 and Defender for Identity.

Experience with endpoint detection, response, and remediation in enterprise environments.

Familiarity with MITRE ATT&CK techniques related to endpoint attacks.

Experience using SIEM platforms such as Microsoft Sentinel for alert correlation and investigation.

Ability to analyze endpoint telemetry and identify malicious or anomalous behavior.

Understanding of incident response lifecycle and SOC operations.

Basic exposure to threat intelligence consumption and IOC‑based investigations.

Solid understanding of Windows operating systems and endpoint security controls.

Knowledge of endpoint lifecycle management, patching, and vulnerability remediation.

Familiarity with network concepts relevant to endpoint investigations.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or Engineering (or equivalent experience).

2–4 years of cybersecurity experience, with strong exposure to endpoint security

Hands‑on enterprise experience with Microsoft Defender for Endpoint is mandatory.

Experience supporting medium‑severity security incidents is strongly preferred.

• Locations Whitefield Palms, Plot No. 9 & 10, Bangalore, 560066, IN (Hybrid)
• Field of Employment IT/Telecommunications