Senior Information Security Administrator

BPM LLP; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A prominent technology firm in Bengaluru is hiring a Security Administrator to ensure the secure operation of computer systems and networks. Responsibilities include managing security policies, conducting audits, and responding to incidents. The ideal candidate will have a college degree in computer science or engineering, along with certifications in security. Strong knowledge of Microsoft security products and hands-on experience with firewalls and intrusion detection systems are essential. This role involves working in a collaborative environment, supporting the team, and maintaining security for internal and external communications.

Qualifications

• College university degree in computer science or any engineering stream.
• Certification in Security areas is a value-add.
• Broad knowledge of Microsoft security suites and standard technologies.

Responsibilities

• Ensure secure operation of in-house computer systems and networks.
• Develop and enforce policies for system security administration.
• Conduct security audits and vulnerability assessments.

Skills

Network security management

Incident response

Data encryption

Firewall management

User activity auditing

Vulnerability assessment

Education

College degree in computer science or engineering

Certification in Security

Tools

Microsoft Purview

Microsoft Defender

Firewalls

Intrusion detection systems

Anti-virus software

Job description

About the role

The Security Administrator’s role is to ensure the secure operation of the in-house computer systems, servers, and network connections. This includes checking server and firewall logs, scrutinizing network traffic, establishing and updating virus scans and troubleshooting. This person will also analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required.

Key Responsibilities

Strategy & Planning

• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user access based on industry-standard best practices.
• Experience with data management and governance using Microsoft Purview, including data classification, sensitivity labels, and compliance-related controls.
• Experience with the Microsoft Defender security suite, including Endpoint, Identity, Email, and Cloud App protection.
• Design and implement incident investigation and security alert response.
• Design and implement disaster recovery plans for operating systems, databases, networks, servers, and software applications.
• Assess need for any security reconfigurations (minor or significant) and execute them if required.
• Keep current with emerging security alerts and issues.
• Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.

Acquisition & Deployment

• Interact and negotiate with vendors, outsourcers, and contractors to obtain protection services and products.
• Recommend, schedule, and perform security improvements, upgrades, and/or purchases.

Operational Management

• Experience supporting and delivering information security projects across endpoint protection, data security, access controls, monitoring, incident response, and compliance initiatives.
• Deploy, manage, and maintain IT security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software.
• Administer and maintain end user accounts, permissions, and access rights.
• Manage connection security for local area networks, company web sites, and remote access.
• Manage and ensure the security of databases and data transferred both internally and externally.
• Design, perform, and/or oversee penetration testing of all systems to identify system weaknesses.
• Design, implement, and report on security system and end user activity audits.
• Monitor user, system, firewall logs, intrusion detections, and network traffic for unusual activity or violation of company security policy.
• Monitor servers, interpret capacity and regulation checks for resolution.
• Recommend scheduled (where appropriate) and ad-hoc fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.
• Download and test new security software and/or other security technologies.
• Perform systems backups.
• Provide on-call security support to end-users.
• Manage and/or provide guidance to junior members of the team.

Knowledge & Experience

• Broad hands‑on knowledge of Microsoft security suites (Purview, Defender, etc.), firewalls, intrusion detection systems, anti‑virus software, data encryption, and other industry‑standard technologies and practices.
• In‑depth technical knowledge of network, applications, cloud app integrations, PC, and platform operating systems.
• Working technical knowledge of current systems software, protocols, and standards.
• Strong knowledge of TCP/IP and network administration/protocols.
• Hands‑on experience with device such as switches, routers, and firewalls.
• Knowledge of applicable practices and solutions related to data privacy and protection.
• Knowledge of law‑enforcement practices and procedures, such as 1L.

Personal Attributes

• Intuition and keen instincts to pre‑empt attacks.
• High level of analytical and problem‑solving abilities.
• Ability to conduct research into security issues and products as required.
• Strong understanding of the organization’s goals and objectives.
• Strong interpersonal and oral communication skills.
• Strong investigative skills.
• Excellent attention to detail.
• Ability to effectively prioritize and execute tasks in a high‑pressure environment.
• Able to work in a team‑oriented, collaborative environment.

Qualification

Formal Education & Certification

• College university degree in the field of computer science and/or any engineering stream. (e.g., B.Sc., B.Tech)
• Certification in Security areas is a value‑add.