IT Security Engineer

Customerinsights.ai; Gurugram District; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

CustomerInsights.AI in Gurgaon is seeking an IT Security Engineer with 4+ years of hands-on cybersecurity operations experience. You will own day-to-day L1 security tasks and contribute to proactive defense across Microsoft 365, Azure AD, and cloud environments.

You will implement security controls, perform incident response, vulnerability remediation, maintain audit-ready documentation, and collaborate with IT, audits, and business stakeholders to strengthen security posture.

Qualifications

• 4+ years of hands-on IT security operations experience.
• Strong knowledge of Microsoft 365 Defender, Purview, Entra ID and Intune.
• Experience with endpoint security tools (EDR, antivirus, disk encryption, MDM).
• Familiarity with SIEM platforms, log monitoring, and alert triage.
• Understanding of IAM concepts: MFA, RBAC, Conditional Access, PIM.
• Security certifications are a plus.

Responsibilities

• L1 IT Operations & Endpoint Management.
• Device provisioning: imaging, OS config, software install, domain enrollment with security baselines.
• Onboarding: create user accounts in AD/Azure AD, assign licenses, configure MFA/SSO.
• Offboarding: secure deactivation, revoke access, archive data.
• Endpoint security: antivirus, EDR, disk encryption, USB controls.
• MDM Administration: Intune enrollment and policy enforcement.
• L1 Security Support: assist end-user security issues and phishing reports.
• M365 & Azure AD Security: policy enforcement and governance.

Skills

Microsoft 365 Security

EDR & Endpoint Security

SIEM & log monitoring

IAM concepts

Vulnerability Scanning

Education

Certifications: CompTIA Security+

Microsoft SC-900

Microsoft SC-200

Tools

Qualys

Tenable

Intune

Azure AD

Defender

Job description

About CustomerInsights.AI

CustomerInsights.AI is a global analytics and AI-driven company founded in 2018, enabling data-driven commercial decision-making for Life Sciences organizations. Our product ecosystem, including ciPARTHENON and ciATHENA, leverages Analytics Automation, Artificial Intelligence, and Machine Learning to deliver timely, actionable insights to key stakeholders. With teams across North America and India, we work with client organizations ranging from emerging startups to large enterprises.

Position Overview

We are seeking a proactive and detail-oriented IT Security Engineer with 4+ years of hands-on experience in cybersecurity operations, endpoint security, vulnerability management, and identity security. In this role, you will be a critical part of our IT team, responsible for both day-to-day L1 security operations and strategic security initiatives. You will work collaboratively with IT, audit, compliance, and business stakeholders to ensure our security posture remains strong, our endpoints are secured, and our Microsoft 365 & cloud environments are configured to the highest standards. You will own and drive: End-to-end L1 IT Security operations — from device setup to user lifecycle management Microsoft 365 & Azure AD security governance, monitoring, and policy enforcement Proactive threat detection, incident response, and vulnerability remediation Security documentation, compliance readiness, and audit evidence management.

Key Responsibilities

• L1 IT Operations & Endpoint Management
• Device Provisioning: Perform end-to-end laptop setup and configuration for new joiners: Imaging, OS configuration, software installation, and domain enrollment Applying security baselines, disk encryption (BitLocker), and MDM enrollment Asset tagging, inventory tracking, and documentation in the CMDB
• Onboarding: Manage the complete employee onboarding process from an IT Security perspective: Create user accounts across Active Directory, Azure AD, and M365 Assign role-based licenses, groups, and permissions as per approved access matrix Configure MFA, SSO, and ensure secure first-login experience Walk new employees through IT security policies and acceptable use guidelines
• Offboarding: Execute secure and timely employee offboarding processes: Disable/delete accounts across all systems within SLA on last working day Revoke VPN, email, application, and cloud resource access immediately Retrieve company devices, wipe data, and update inventory records Archive mailboxes and transfer data ownership to Reporting Manager
• Endpoint Security: Implement and manage endpoint security controls including antivirus, EDR agents, disk encryption, USB controls, and device hardening policies
• MDM Administration: Administer MDM (Microsoft Intune / similar) enroll devices, push policies, and enforce compliance
• L1 Security Support: Provide Level 1 security support for end-user security issues, phishing reports, and access requests
• Microsoft 365 & Azure AD Security
• M365 Portal Review: Conduct regular reviews of the Microsoft 365 Defender, Purview, and Compliance portals to identify security gaps, misconfigurations, and active threats: Review Secure Score recommendations and implement approved improvements Monitor Exchange Online Protection (EOP), Defender for Office 365 alerts and quarantine Audit SharePoint, OneDrive, and Teams sharing settings and external access
• Policy Implementation: Design, implement, and enforce Microsoft 365 security policies across the tenant: Conditional Access policies — location-based, device compliance, and risk-based Data Loss Prevention (DLP) policies for email, Teams, SharePoint, and endpoints Information Protection labels and retention policies in Microsoft Purview Anti-phishing, anti-spam, safe links, and safe attachments policies in Defender
• Policy Review: Perform scheduled reviews of all active M365 security policies to ensure continued effectiveness: Review and update Conditional Access, DLP, and MFA policies quarterly Identify redundant or conflicting policies and propose rationalization Document policy change history and maintain an approval audit trail
• M365 Documentation: Prepare and maintain comprehensive security documentation for M365 configurations: Maintain a current M365 security configuration baseline document Document all policy implementations with rationale, scope, and exceptions Keep runbooks and SOPs updated for common M365 security tasks
• Security Suggestions: Provide proactive security recommendations to improve the M365 security posture: Analyze Secure Score trends and present improvement roadmaps to management Research and propose adoption of new security features (e.g., Copilot for Security, SSPM tools) Benchmark tenant configuration against CIS M365 benchmarks and industry best practices
• Azure AD Governance: Monitor and manage Azure AD / Entra ID configurations: Enforce MFA, SSPR, and Privileged Identity Management (PIM) Review Guest user access, enterprise app permissions, and OAuth consent grants Conduct periodic User and Admin access reviews, action findings within SLA
• Security Monitoring & Incident Response Alert Monitoring: Monitor and triage alerts from SIEM, EDR, DLP, MDM, and M365 Defender portals daily Incident Response: Perform initial investigation, containment, and documentation for security incidents: Follow defined incident response playbooks for phishing, malware, data leakage, and unauthorized access Escalate confirmed incidents with a detailed timeline and impact assessment
• Vulnerability Management: Conduct regular vulnerability scans, validate findings, and track remediation with IT and engineering teams
• Threat Hunting: Perform threat hunting activities and proactively identify indicators of compromise (IOCs)
• Identity & Access Management (IAM) Enforce MFA, RBAC, and least privilege access principles across all platforms Conduct periodic access reviews and certifications; remediate access anomalies Support user onboarding and offboarding to ensure secure provisioning and deprovisioning Manage privileged accounts and admin access with appropriate oversight and logging
• Compliance, Documentation & Audit Readiness Prepare audit-ready evidence packages for ISO **, SOC 2 Type II, and internal audits Maintain and regularly update security SOPs, configuration baselines, and policy repositories Support risk assessments and vendor security reviews; document findings and track remediation Participate in security awareness programs and organization-wide risk mitigation initiatives

Qualifications

• 4+ years of hands-on experience in IT security, security operations, or related IT roles
• Strong working knowledge of Microsoft 365 Security suite Defender, Purview, Entra ID, and Intune
• Experience with endpoint security tools (EDR, antivirus, disk encryption, MDM)
• Familiarity with SIEM platforms, log monitoring, and alert triage
• Understanding of IAM concepts: MFA, RBAC, Conditional Access, PIM
• Hands-on experience with vulnerability scanning tools (Qualys, Tenable, or similar)
• Knowledge of security frameworks: ISO **, SOC 2
• Strong documentation skills ability to write clear SOPs, policies, and audit evidence
• Excellent communication and stakeholder management skills
• Ability to manage multiple priorities in a dynamic work environment
• Flexible to collaborate across different time zones, including IST and US business hours, based on team and project needs
• Willing to provide occasional extended-hour support, when required, for collaboration with US stakeholders, security operations, or critical incident support

Preferred Certifications (Not Mandatory)

• CompTIA Security+
• Microsoft SC-900 – Microsoft Security, Compliance, and Identity Fundamentals
• Microsoft SC-200 – Microsoft Security Operations Analyst

Job Location: Gurgaon

Why Join Us?

• Play a key role in shaping the next generation of intelligent enterprise platforms
• Work at the intersection of cutting-edge AI and real-world business impact
• Collaborate with passionate data scientists, engineers and domain experts
• Benefit from a flexible work environment focused on continuous learning and innovation

Culture & Values

We foster a high-ownership, performance-driven culture where teams are encouraged to think creatively, act responsibly, and deliver measurable outcomes. Our values guide how we collaborate, make decisions, and build long-term partnerships.