ENGINEER - Information Security Engineer

Sansera Engineering Limited; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Sansera Engineering Limited is seeking a Security Operations function lead to administer and optimize the enterprise security stack, including EDR, DLP, CSPM, and ZTNA. You will drive incident remediation, policy tuning, and compliance reporting across a large enterprise.

The role requires 3–5 years of relevant experience with hands-on skills in threat hunting, vulnerability management, and cloud security across AWS and Azure, plus a knack for building automation and SOPs to improve operations.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3–5 years of relevant security experience.
• Certifications like CCFA, AZ-500, CEH are a plus.

Responsibilities

• Administer, monitor, and optimize the enterprise security stack (EDR, DLP, CSPM, ZTNA).
• Design DLP rules and drive ZTNA migration; manage incident remediation and reporting.
• Run Nessus scans and track remediation SLAs with IT teams.

Skills

Threat hunting

Incident response

Policy tuning

Automation/SOPs

Education

Bachelor’s degree in Computer Science Engineering / Information Technology / Cybersecurity

Tools

CrowdStrike Falcon

Forcepoint

Netskope

Zscaler

Tenable Nessus

AWS Security Hub

Azure Defender

F5 WAF

Python

SQL

Job description

Sansera Engineering Limited

Prime Function

Administer, monitor, and optimize the enterprise security stack—spanning endpoint detection and response (EDR), data loss prevention (DLP), cloud security posture management (CSPM), vulnerability management, and Zero Trust Network Access (ZTNA). Drive incident remediation, policy tuning, and compliance reporting across a large-scale enterprise environment.

Job Description / Responsibilities

• Endpoint Security: Manage CrowdStrike Falcon (EDR, NGSIEM, Spotlight); fine-tune policies (AV, USB, Network) and lead threat hunting/incident response. DLP & SASE: Design DLP rules (Forcepoint, Netskope, Zscaler) using regex/fingerprinting; drive ZTNA migration and resolve data leakage incidents. Vulnerability Management: Run Tenable Nessus scans, track patch remediation SLAs with IT teams, and produce executive compliance reports. Cloud Security: Monitor AWS Security Hub & Azure/Microsoft Defender; fix IAM/CSPM misconfigurations and support F5 WAF onboarding. Email & Threat Intel: Configure email security (Forcepoint ESG, M365 EOP) and triage dark web compromised credential alerts. Automation & SOPs: Build Python/SQL scripts to automate reporting workflows and maintain operational SOPs and audit records.

Authority

Policy Configuration: Authorized to configure and tune security policies across CrowdStrike, Forcepoint, Zscaler, Netskope, and Cloud Security tools.

Incident Containment: Authorized to execute host isolation, force password resets, terminate sessions, and enforce MFA during active security incidents.

Access Mapping: Authorized to map app segments and define granular access controls for ZTNA network migration.

Job Specification / Competency

• Education: Bachelor’s degree in computer science engineering, Information Technology, Cybersecurity, or a related discipline (MBA in Information Systems is a plus).

Experience

- 3 to 5 years

Preferred Certifications

• CrowdStrike Certified Falcon Administrator (CCFA) or equivalent EDR certification.
• AWS Certified Cloud Practitioner / Azure Security Engineer Associate (AZ-500).
• CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent security credentials.

Performance Measures

• SLA Compliance: Percentage of security and DLP incidents triaged and resolved within operational SLAs. Vulnerability Remediation Rate: Timely closure of high and critical vulnerabilities based on target SLAs. False Positive Reduction: Reduction in alert noise via effective policy tuning across EDR, DLP, and Email gateways.
• Cloud Risk Reduction: Reduction of high‑severity IAM and CSPM misconfiguration findings. Audit & Documentation: Quality and up‑to‑date status of SOPs and investigation audit records.