Lead/ L3- Engineer Support & Implementation Cyber Security

Intendminds Solutions; Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Intendminds Solutions in Mumbai seeks an experienced Cybersecurity Lead to strengthen security operations, monitoring, incident response, endpoint protection and governance. The role demands hands-on expertise across SOC, threat detection, cloud security, email security, DLP and DSPM.

You will lead security in a multi‑domain environment, coordinate with IT and engineering and drive security maturity from on‑prem to cloud, including migration of legacy services to cloud-based platforms.

Qualifications

• 8+ years of IT/cybersecurity experience.
• Strong experience in SOC operations and incident response.
• Hands-on with SASE, email security platforms, DLP, DSPM, and microsegmentation.

Responsibilities

• Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.
• Establish and improve IR, threat detection and threat intelligence capabilities.
• Manage endpoint security, EDR/XDR, vulnerability management, patch management and security hardening.
• Monitor and respond to cyber threats including ransomware, phishing, malware, credential attacks, insider threats and APTs.
• Implement and manage SIEM, SOAR, EDR, vulnerability management and other security technologies.
• Design and implement SASE architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.
• Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation and perimeter defense.
• Lead security incidents investigations, root-cause analyses, containment and recovery.
• Establish cybersecurity KPIs, dashboards and management-level security reporting.
• Collaborate with IT, engineering, product, DevOps and management to embed security into development.

Skills

SOC operations

Incident response

Threat detection

Cloud security

Email security

DLP

DSPM

Micro-segmentation

Threat intelligence

Vulnerability management

Security governance

Networking security

Compliance & risk

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering

Tools

SIEM

SOAR

EDR/XDR

NG-AV

DLP tools

Job description

Job Description

Cybersecurity Support & Implementation Lead/L3

About the Role

We are looking for an experienced Cybersecurity Support & Implementation L3 to strengthen our Cybersecurity operations, security monitoring, incident response, endpoint protection, and security governance. The ideal candidate will have 8+ years of experience in cybersecurity, with hands‑on expertise in SOC operations, endpoint security, threat detection, incident management, cloud security, Email security, Network Security, DLP, vulnerability management, and security frameworks.

Key Responsibilities

• Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.
• Establish and improve Security Incident Response, Threat Detection, and Threat Intelligence capabilities.
• Manage endpoint security, EDR/XDR, NG-AV, vulnerability management, patch management, and security hardening.
• Monitor and respond to cyber threats including ransomware, phishing, malware, credential attacks, insider threats, and advanced persistent threats.
• Implement and manage SIEM, SOAR, EDR, vulnerability management, and other security technologies.
• Design and implement SASE (Secure Access Service Edge) architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.
• Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation, and perimeter defense.
• Implement micro‑segmentation strategies to reduce lateral movement risks across data centers, cloud, and hybrid environments.
• Oversee email security solutions, including anti‑phishing, anti‑spam, DMARC/DKIM/SPF enforcement, and advanced threat protection.
• Lead email security implementation and migration projects, including transition from legacy gateways to modern cloud‑based email security platforms.
• Implement and manage Data Security Posture Management (DSPM) solutions to discover, classify, and protect sensitive data across cloud and SaaS environments.
• Implement and govern Data Loss Prevention (DLP) solutions across endpoints, email, cloud, and network channels.
• Conduct security assessments, vulnerability assessments, risk assessments, and security audits.
• Strengthen security controls across cloud, network, servers, endpoints, applications, and data layers.
• Define and maintain cybersecurity policies, procedures, incident‑response playbooks, and operational runbooks.
• Ensure compliance with applicable cybersecurity regulations, standards, and frameworks.
• Work closely with IT, engineering, product, DevOps, infrastructure, and management teams to embed security into technology and product development.
• Lead cybersecurity incident investigations, root‑cause analysis, containment, eradication, and recovery.
• Establish cybersecurity KPIs, dashboards, risk reports, and management‑level security reporting.
• Manage relationships with MSSPs, security vendors, auditors, and external cybersecurity partners.
• Conduct security awareness and incident‑response training for employees and relevant stakeholders.
• Continuously evaluate emerging cyber threats, technologies, vulnerabilities, and attack techniques and recommend appropriate countermeasures.

Required Experience & Skills

• 8+ years of overall IT/cybersecurity experience.
• Strong experience managing SOC / Security Operations.
• Strong understanding of SIEM, SOAR, EDR/XDR, endpoint security, network security, vulnerability management, and incident response.
• Hands‑on experience with SASE, email security platforms, DLP, DSPM, and microsegmentation technologies.
• Experience in email security implementation and migration projects (on‑prem to cloud or legacy to modern platforms).
• Strong understanding of cybersecurity frameworks, policies, risk management, and compliance.
• Strong understanding of Windows/Linux security and enterprise infrastructure.
• Experience with cloud security, preferably AWS/Azure. Strong understanding of networking, firewalls, VPNs, IDS/IPS, IAM, DLP, email security, and security monitoring.
• Experience with threat intelligence, malware analysis, forensic investigation, and security incident management.
• Understanding of IoT/OT/connected-device security is desirable.
• Strong analytical, problem-solving, communication, and stakeholder-management skills.
• Ability to lead cybersecurity teams and manage external security partners.
• Preferred Certifications
• CISM
• CEH
• CompTIA Security+
• ITIL
• AWS/Azure Security certifications
• OEM Certifications

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.

Key Success Metrics

• SOC monitoring and incident‑response effectiveness.
• Endpoint, network, and data security posture improvement.
• Successful implementation of EDR/ XDR, SASE, micro‑segmentation, DSPM, and DLP controls.
• Email security effectiveness and successful migration execution.
• Vulnerability remediation and patch compliance.
• Cybersecurity audit and regulatory compliance.
• Implementation of Security-by-Design across technology and engineering teams.
• Improvement in organizational cyber resilience and security awareness.
• Location: Andheri East, Mumbai
• Working- Work from Office