It Security Specialist

RSPL Group; Gurugram District; On-site; INR 350,000 - 550,000; Full time

Job summary

RSPL Group is seeking a Security Engineer for Threat Hunting & Compliance in Gurugram to proactively hunt threats and lead incident response across hybrid environments. You will develop and manage the Incident Response Plan, coordinate tabletop exercises, and drive improvements in security controls including DLP, PAM, and cloud security tools.

The role requires hands-on experience with cloud security across AWS/Azure/GCP, SIEM/SOC operations, and ISO 27001 implementation.

Qualifications

• 47 years of experience in cybersecurity operations, threat hunting, cloud security and compliance.

Responsibilities

• Perform proactive threat hunting using Sophos EDR and MDR, Cisco Umbrella, and other advanced tools.
• Lead all incident response activities for network, server, and cloud environments.
• Develop, implement, and independently manage the Incident Response Plan (IRP), including tabletop exercises and continuous improvements.
• Act as the go-to person during any security incident or breach.
• Administer and optimize security solutions including DLP, PAM (Delinea/others), CrowdStrike, Zscaler, Cisco Umbrella, and Cloud-native security tools (AWS, Azure, GCP).
• Continuously enhance security posture across on-premise and cloud infrastructure.
• Implement policies for secure identity and access management across hybrid environments.
• Perform quarterly VAPT using RSPL-owned licensed tools.
• Conduct vulnerability scanning, exploit validation, and penetration testing across applications, servers, endpoints, and cloud workloads.
• Document findings, recommend risk-based remediation, and track closure with technical and business teams.
• Implement and maintain ISO 27001 controls across applications, servers, and cloud services.
• Drive improvements towards achieving higher maturity under the NIST Cybersecurity Framework (CSF).
• Ensure all audits, risk assessments, and compliance reporting requirements are successfully met.
• Maintain real-time security dashboards, incident logs, and compliance metrics for management.
• Drive cross-team awareness and security best practices through training and playbooks.

Skills

Threat hunting

Incident response

Security operations

Compliance

Tools

Sophos EDR/MDR

CrowdStrike

Zscaler

Cisco Umbrella

DLP

PAM (Delinea)

Cloud-native security tools (AWS/Azure/GCP)

VAPT tools

SIEM

Security automation tools

Job description

Position - Security Engineer Threat Hunting & Compliance

Location - Gurugram

Employment Type - Full-time

Key Responsibilities

• Perform proactive threat hunting using Sophos EDR and MDR, Cisco Umbrella, and other advanced tools.
• Lead all incident response activities for network, server, and cloud environments.
• Develop, implement, and independently manage the Incident Response Plan (IRP), including tabletop exercises and continuous improvements.
• Act as the go-to person during any security incident or breach.
• Administer and optimize security solutions including DLP, PAM (Delinea/others), CrowdStrike, Zscaler, Cisco Umbrella, and Cloud-native security tools (AWS, Azure, GCP).
• Continuously enhance security posture across on-premise and cloud infrastructure.
• Implement policies for secure identity and access management across hybrid environments.
• Perform quarterly VAPT using RSPL-owned licensed tools.
• Conduct vulnerability scanning, exploit validation, and penetration testing across applications, servers, endpoints, and cloud workloads.
• Document findings, recommend risk-based remediation, and track closure with technical and business teams.
• Implement and maintain ISO 27001 controls across applications, servers, and cloud services.
• Drive improvements towards achieving higher maturity under the NIST Cybersecurity Framework (CSF).
• Ensure all audits, risk assessments, and compliance reporting requirements are successfully met.
• Maintain real-time security dashboards, incident logs, and compliance metrics for management.
• Drive cross-team awareness and security best practices through training and playbooks.

Required Skills & Qualifications

• 47 years of experience in cybersecurity operations, threat hunting, cloud security, and compliance.
• Strong expertise with Sophos EDR/MDR, CrowdStrike, Zscaler, Cisco Umbrella, DLP, and PAM solutions.
• Hands-on experience with VAPT tools for security testing.
• Knowledge of cloud-native security controls across AWS, Azure, and/or GCP.
• Understanding of ISO 27001 implementation and NIST CSF maturity assessments.
• Familiarity with SIEM/SOC operations and security automation tools.
• Certifications such as CEH, CCNA Security, AWS Security, ISO 27001 LA, or equivalent preferred.