L3- Endpoint Security Engineer (Trend Micro, Sentinel One, Trellix)

Neev; Mumbai; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Neev is seeking an experienced L3 Security Engineer for Endpoint Security to lead the administration, optimization, and defense of our enterprise security infrastructure. You will collaborate with SOC and Incident Response teams to mitigate threats, manage endpoint policies, and ensure regulatory compliance across Windows and Linux environments.

The role emphasizes platform administration, FIM management, and proactive threat hunting with hands-on work on Trend Micro Deep Security, SentinelOne,

Qualifications

• Hands-on admin with Trend Micro Deep Security, SentinelOne, and Trellix.
• Deep expertise in File Integrity Monitoring (FIM) and custom integrity policies.
• Proven track record with AV, EDR, and XDR technologies.
• Knowledge of malware analysis, endpoint hardening, and threat vectors.
• Strong Windows and Linux administration skills.
• Solid understanding of networking protocols (TCP/IP, DNS, VPN, SSL/TLS).
• Experience with Active Directory and GPO.
• Familiarity with PCI-DSS, ISO 27001, and NIST compliance.

Responsibilities

• Platform administration of endpoint security solutions (Trend Micro DS, SentinelOne, Trellix).
• Manage FIM policies and monitor for unauthorized changes.
• Installations, agent deployments, upgrades, migrations, and policy tuning.
• Investigate malware and EDR alerts; support SOC escalation workflows.
• Troubleshoot agent communications, update errors, and reduce false positives.
• Integrate endpoint platforms with SIEM/SOAR and generate reports.

Skills

Trend Micro Deep Security

SentinelOne

Trellix ePO

EDR

XDR

Windows Admin

Linux Admin

Education

Bachelor's Degree in Computer Science or Information Security

Tools

Active Directory

Group Policy (GPO)

SIEM

SOAR

Splunk

Microsoft Sentinel

QRadar

Job description

L3 Security Engineer – Endpoint Security

Job Overview

• Position: L3 Security Engineer (Endpoint Security)
• Experience Required: 6–10 Years (Minimum 5+ years in AV/EDR/FIM administration and support)
• Education: Bachelor’s Degree in Computer Science, Information Security, or a related field
• Primary Technologies: Trend Micro Deep Security, SentinelOne, Trellix/McAfee ePO

We are seeking an experienced L3 Security Engineer to join our enterprise security team. In this role, you will lead the administration, optimization, and defense of our endpoint security infrastructure. You will work closely with the Security Operations Center (SOC) and Incident Response teams to mitigate advanced threats, manage endpoint policies, and ensure strict regulatory compliance across Windows and Linux environments.

Key Responsibilities

• Platform Administration: Manage, configure, and maintain enterprise endpoint security solutions, specifically Trend Micro Deep Security, SentinelOne, and Trellix.
• FIM Management: Administer File Integrity Monitoring (FIM) policies, proactively monitoring unauthorized file, registry, and system configuration changes.
• Lifecycle & Operations: Perform installations, agent deployments, system upgrades, migrations, and continuous policy tuning.
• Incident Response & Threat Hunting: Investigate malware, ransomware, and complex endpoint security incidents; analyze EDR alerts to support SOC escalation workflows.
• Optimization & Troubleshooting: Resolve agent communication failures, update errors, FIM event anomalies, and performance bottlenecks; reduce false positives through advanced tuning.
• Integration & Reporting: Integrate endpoint platforms with SIEM/SOAR tools and generate comprehensive operational, audit, and compliance reports.

Qualifications & RequirementsRequired Skills

• Hands-on administrative experience with Trend Micro Deep Security, SentinelOne, and Trellix.
• Deep expertise in File Integrity Monitoring (FIM) and custom integrity monitoring policies.
• Proven track record with AV, EDR, and XDR technologies.
• Foundational knowledge of malware analysis, endpoint hardening, and threat vectors.
• Strong operating system knowledge in Windows and Linux administration.
• Solid understanding of core networking protocols (TCP/IP, DNS, VPN, SSL/TLS).
• Experience managing infrastructure via Active Directory and Group Policy (GPO).
• Familiarity with major compliance frameworks including PCI-DSS, ISO 27001, and NIST.

Preferred Certifications

• Trend Micro Certified Professional
• Trellix/McAfee Certified Specialist
• CompTIA Security+ / CySA+ or Certified Ethical Hacker (CEH)

Good to Have

• Experience integrating with SIEM solutions (Splunk, IBM QRadar, or Microsoft Sentinel).
• Proficiency in scripting languages such as PowerShell, Python, or Bash.
• Direct experience supporting internal/external compliance audits and assessments.

Skills: incident response,edr,infrastructure,linux,trend micro,endpoint security