Information Security Specialist

Sapiens; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Sapiens is seeking a Security Specialist (Information Security) to join our global IT Security team in India. This hands-on role handles security tickets across EDR, DLP, email protection, DNS security, CSPM, and more, serving as the first responder and coordinating with teams to resolve incidents within SLA.

You will rotate shifts every two weeks (Morning/Afternoon/Evening) and support tool administration alongside project work in a fast-paced security operations environment.

Qualifications

• 3+ years in information security operations or SOC.
• Hands-on experience handling security tickets across multiple tools.
• Exposure to at least four of the listed tools is preferred.

Responsibilities

• Manage security incidents and tickets across multiple platforms.
• Review, investigate, and resolve security tickets with SLA adherence.
• Coordinate with end users, IT, and teams to gather details.
• Escalate high-severity incidents to senior staff as needed.
• Support security tool administration and project tasks.

Skills

Security operations

Incident handling

Ticketing

Cross-tool experience

Tools

EDR

DLP

Email protection

DNS security

CSPM

Exposure Management

External Attack Surface Management

Identity Protection

Purview

ServiceNow

Job description

System Administrator - Cyber Security SAPIENS INTERNATIONAL Security Specialist IT – Information Security Operations | Information Security Specialist | Full-Time | India | Rotational Shift

Sapiens International is looking for a Security Specialist (Information Security Specialist) to join our global IT Security team. This is a hands-on, incident-driven role responsible for reviewing and resolving security tickets raised by users and teams across the business. You will be the first point of response for security tickets raised across our security tools — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, Purview, and other platforms in our stack. You will review each ticket, investigate the cause, and work it through to resolution, escalating where needed. Alongside ticket handling, you will also support security tool administration and take up tasks assigned by your manager.

Work Schedule

This is a rotational shift role. Shifts rotate every two weeks across three windows: Morning 9:00 AM – 6:00 PM, Afternoon 1:00 PM – 10:00 PM, and Evening 6:00 PM – 3:00 AM.

KEY RESPONSIBILITIES

• Incident & Ticket Management
• Review, investigate, and resolve security incidents and tickets raised by users and teams across various security tools
• Handle tickets spanning multiple security platforms, working across a minimum of four of: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Diagnose the root cause of each reported issue and take the appropriate action to fix it, whether it’s a policy change, configuration update, or coordination with another team
• Coordinate with end users, IT, and other teams to gather information and drive tickets to closure within SLA
• Escalate complex or high-severity incidents to senior team members or the manager as needed

Security Tools & Task Support

• Support day-to-day administration and configuration of security tools such as EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Work on security tasks, tool improvements, and projects assigned by the manager

REQUIREMENTS

• Experience 3+ years of experience in information security operations, a security operations center, or a security service‑desk role
• Hands‑on experience handling security tickets or incidents across multiple security tools
• Demonstrated exposure to at least four of the following: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview

Technical — Must Have

• Working knowledge of common security tools and the issues they generate — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Understanding of ticket-based troubleshooting — reading alerts, checking logs/policies, and identifying root cause
• Ability to work independently to research and resolve tickets using vendor documentation and internal knowledge bases

Soft Skills & Language

• Fluent verbal English
• Willing and flexible to work a rotational shift model (morning/afternoon/evening, rotating every two weeks)
• Able to multi-task, prioritize, and stay organized under ticket volume
• Team player with a proactive, ownership mindset

Advantage (Not Required)

• Prior hands‑on exposure to any of: CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview
• Exposure to ITSM/ticketing tools (ServiceNow)
• Security-related certifications: CompTIA Security+, CEH, or vendor‑specific (Microsoft, CrowdStrike, etc.)

Experience Level Mid Level