L2 Operations Engineer – Malware Tools

TESTQ Technologies LTD.; Gurugram District; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

TESTQ Technologies LTD. is seeking an L2 Operations Engineer focused on Malware Tools in a hybrid setup in India. You will support endpoint protection, monitor tools 24x7, and resolve incidents with escalation to L3 as needed.

The role requires hands-on experience with CrowdStrike and Windows Defender, strong incident triage, and ITSM processes. Collaboration with cross-functional teams will be essential to maintain secure client environments.

Qualifications

• 12 Years of L2 endpoint security experience (to be confirmed).
• CrowdStrike and Windows Defender console and agent troubleshooting.
• Alert triage, risk rating and escalation.
• ITSM incident, problem and change processes.

Responsibilities

• End-to-end incident management from L1/L1.5 escalation to closure.
• Triage, diagnose, and resolve endpoint and malware incidents; escalate to L3 with findings.
• Monitor security platforms 24x7x365 and raise alerts on malicious activity.
• Report security issues with recommended actions and keep tickets up to date.

Skills

L2 endpoint security

CrowdStrike

Windows Defender

Incident triage

ITSM

Tools

Defender for Endpoint

IVQ tools

Phishing tools

Job description

TQINE0093_6050 - L2 Operations Engineer - Malware Tools

L2 Operations

Job Type: Contract,Permanent

Work Mode: Hybrid (3 Days from office)

Domain

Endpoint & Malware Protection

Scope

Support the client's endpoint protection and malware tools. Monitor platforms 24x7x365, resolve L2 incidents and elevate to L3 when needed.

Process

• End-to-end incident management, from L1/L1.5 escalation to closure.
• Triage, diagnose and resolve endpoint and malware incidents. Escalate to L3 with findings.
• Monitor in-scope security platforms 24x7x365.
• Raise alerts on malicious activity and intrusions by risk rating, as per client policy.
• Report security issues promptly with recommended actions.
• Install, update and maintain anti-virus and endpoint protection on client systems.
• Manage endpoint protection consoles, patching and upgrades.
• Handle phishing reports with the client security team.
• Keep ServiceNow tickets current, with clear resolution and closure notes.
• Join RCA reviews. Update SOPs and knowledge-base articles.
• Use incident trends to tune alerts and reduce repeat incidents.
• Follow client security standards and guidelines.
• Work with DLP, Hosting, Network Security and IDAM on cross-tower issues.

Tools

• IVQ and phishing tools
• Microsoft Defender for Endpoint

Technologies

• Endpoint protection: anti-virus and EDR
• Malware detection and investigation
• Phishing and mail security
• Endpoint patching and software upgrades
• Secrets and key management
• Python or PowerShell scripting

Experience

• 12 Years of L2 endpoint security experience (to be confirmed)
• CrowdStrike and Windows Defender console and agent troubleshooting
• Alert triage, risk rating and escalation
• ITSM incident, problem and change processes