Manager – Host Security

Ujjivan Small Finance Bank Ltd.; Bengaluru; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Ujjivan Small Finance Bank Ltd. seeks a seasoned Manager - Host Security to lead endpoint security operations and strengthen protection, resilience and compliance of the Bank’s endpoint ecosystem.

You will drive deployment of endpoint security tools across Windows, Linux, macOS, mobile devices and cloud endpoints, own patch-management processes and ensure integration of endpoint logs with the enterprise SIEM for proactive threat detection and regulatory reporting.

Qualifications

• Bachelor's or master's in Information Security, Computer Science or equivalent.
• Minimum 8 years of experience in endpoint/host security management, BFSI sector preferred.
• Deep knowledge of EDR/XDR, endpoint protection, OS security and patch management.

Responsibilities

• Lead implementation and lifecycle management of endpoint security solutions (antivirus, HIPS, EDR/XDR, app control, FIM).
• Deploy endpoint security across Windows, Linux, macOS, mobile and cloud endpoints.
• Own patch-management process and define rollout schedules, verification, and remediation plans.
• Integrate endpoint logs with enterprise SIEM for monitoring and threat detection.
• Manage VPN access, MFA integration, conditional access, and least-privilege controls.
• Oversee endpoint hardening, gold-images and configuration drift reviews.
• Lead containment, forensic triage and root-cause analysis for endpoint incidents.

Skills

EDR/XDR platforms

Endpoint protection

OS security

Patch management

FIM tools

UEM tools

Vulnerability management

Zero Trust

MFA

Education

Bachelor's or Master's in Information Security or Computer Science

Tools

EDR/XDR platforms

Patch management tools

FIM tools

UEM tools

Job description

We are seeking an experienced Manager - Host Security to lead endpoint security operations and strengthen the protection, resilience and compliance of the Bank’s endpoint ecosystem.

Key Responsibilities

• Lead the implementation and lifecycle management of endpoint security solutions, including antivirus, HIPS, EDR/XDR, application control and File Integrity Monitoring.
• Drive the deployment of endpoint security tools across Windows, Linux, macOS, mobile devices and cloud-based endpoints.
• Own the operating system and third-party application patch-management process.
• Define patch rollout schedules, verification mechanisms and vulnerability-remediation plans.
• Ensure endpoint logs are integrated with the enterprise SIEM for monitoring and threat detection.
• Govern secure VPN access, endpoint posture assessment, MFA integration and conditional-access controls.
• Implement role-based access, least-privilege and device-trust principles across endpoints.
• Oversee endpoint hardening, gold-image implementation and configuration-drift reviews.
• Manage MDM/UEM policies for corporate devices, BYOD and COPE environments.
• Lead containment, forensic triage and root-cause analysis for endpoint security incidents.
• Coordinate with SOC, infrastructure and business teams for incident remediation and regulatory reporting, where applicable.
• Track endpoint risks, unsupported operating systems and end-of-life migration plans.
• Maintain endpoint security metrics covering patch compliance, malware alerts, policy violations and incident response.
• Support audit, vulnerability assessment and penetration-testing closure.
• Manage system integrators, security vendors, service-level agreements and team performance.
• Evaluate AI/ML capabilities within EDR/XDR platforms for anomaly detection and endpoint risk scoring.

Desired Candidate Profile

• Bachelor’s or master’s degree in Information Security, Computer Science or an equivalent discipline.
• Minimum 8 years of experience in endpoint or host security management, preferably within the BFSI sector.
• Deep working knowledge of EDR/XDR, endpoint protection, OS security, patch management, encryption, FIM, UEM and vulnerability management.
• Experience managing Windows, Linux, macOS, mobile and cloud endpoints.
• Strong understanding of Zero Trust, MFA, conditional access, least privilege and endpoint risk scoring.
• Experience in endpoint incident response, forensic readiness and root-cause analysis.
• Familiarity with RBI, CERT-In, IRDAI or other applicable regulatory expectations.
• Ability to manage a medium-sized technical team and coordinate cross-functional remediation.
• Strong vendor-management, operational-governance and executive-reporting capabilities.
• Vendor-specific certifications such as Microsoft Security, SentinelOne or Trend Micro are preferred.
• CEH, CISSP or CISM certification would be an added advantage.