Security Engineer(4-5 Years)

Tata Consultancy Services; Dadri, Gurugram District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Tata Consultancy Services is seeking a Security Engineer in India to administer ArcSight SIEM/UEBA/SOAR, manage EDR, DLP, PAM, and application security, and lead threat-hunting and vulnerability assessments. The role involves collaborating with SOC/IR teams and deploying enterprise security platforms.

Experience with ArcSight, SIEM/UEBA/SOAR playbooks, and strong knowledge of Zero Trust architectures are required.

Qualifications

• Administer ArcSight SIEM, UEBA, and SOAR including connectors, parsers, rules, dashboards, and reports.
• Monitor security events and incidents through SIEM with timely triage and response.
• Develop and tune correlation rules, use cases, and anomaly detection models.
• Leverage UEBA to detect insider threats and behavior anomalies.
• Integrate external/internal threat feeds into TIP frameworks (STIX/TAXII).
• Automate intelligence workflows and build ArcSight SOAR playbooks for incident response.

Responsibilities

• Collaborate with SOC, IR, and other teams for coordinated response actions.
• Deploy and troubleshoot Check Point Harmony EDR and Fortinet AV platforms.
• Manage DLP, PAM, and application security controls across enterprise endpoints.
• Conduct endpoint threat hunting and malware behavior analysis.
• Perform vulnerability assessments with Tenable across servers, devices, and networks.
• Operate ZTNA/Zero Trust architectures and related security technologies.

Skills

SIEM

UEBA

SOAR

Endpoint Security

Threat Intelligence

PAM

Host-based security solutions

EDR

DLP

Email Security

Firewall

Anti-Apt

WAF

Zero Trust

Application Security

Defense-In-Depth

Tools

ArcSight SIEM

ArcSight UEBA

ArcSight SOAR

Threat feeds (STIX/TAXII)

Tenable

Check Point Harmony

Trend Micro Deep Security

Fortinet

Arcon PAM

Forcepoint DLP

Trend Micro DDEI

IBM Guardian DAM

Thales HSM

42Gears MDM/EMM/MTD

Zscaler ZTA/ZPA

OWASP Top 10

Job description

Role - Security Engineer

Required Technical Skill Set** - SIEM, UEBA, SOAR, Endpoint Security, Threat Intelligence, Privileged Access Management, Host-based security solutions,SIEM, SOAR,UEBA, EDR, DLP, PAM, Email Security,Firewall, Anti-Apt, VAPT,Application Security,WAF, Defense-In Depth, Zero Trust

Desired Competencies (Technical/Behavioral Competency/Skills) Must-Have** -

• Administer, configure, and optimize ArcSight SIEM including connectors, parsers, correlation rules, dashboards, and reports.

• Monitor security events, alerts, and incidents through SIEM and ensure timely triage and response.
• Develop and fine-tune correlation rules, Use Cases, and anomaly detection models.

• Leverage ArcSight UEBA platforms to detect behavioral anomalies and insider threats.

• Integrate and operationalize external & internal threat feeds into TIP threat intel frameworks (STIX/TAXII)

Perform IOC enrichment, threat scoring, and automate intelligence workflows. Build and maintain ArcSight SOAR playbooks to automate security incident response processes.

• Collaborate with SOC, IR, and other teams for coordinated response actions.

• Deploy, administer, and troubleshoot Checkpoint Harmony EDR solutions.

• Manage Trend Micro Deep Security HIPS, host-based firewall policies, and OS-level hardening.

• Conduct endpoint threat hunting and malware behavioral analysis.

• Ensure application security controls, secure configuration, patching & vulnerability remediation.

• Manage enterprise Fortinet AV platforms.

• Create/update policies, signatures, and analyze malware events.

• Respond to outbreaks and perform root-cause analysis.

• Implement and administer Arcon PAM tools.

• Manage workflows for privileged access, session monitoring, vaulting, and password rotation.

• Conduct periodic access reviews and ensure least privilege

• . Working knowledge of Zscaler ZTA/ZPA and Zero Trust architectures (ZTNA, identity-centric access, continuous verification).

• AppSec fundamentals: OWASP Top 10, API Security Top 10, SAST/DAST tooling, secure coding patterns and SBOM practices.

• Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA, Container Security)
• Perform network-level vulnerability assessments by Tenable on servers, network devices, firewalls, routers, switches, databases, and OS components.

• Deploy, configure, and manage Fortinet Anti-APT platforms such as Trend Micro Deep Discovery, Fortinet ATP, or similar enterprise APT solutions.

• Manage APT platforms (e.g., sandboxing, detonation, behavioral analytics); integrate telemetry with SIEM/SOAR.

• Monitor and analyze advanced threat alerts, sandbox reports, and malicious payload behavior.

• Configure endpoint, network, Application and Email Forcepoint DLP policies, tune classifiers and dictionaries.

• Investigate Forcepoint DLP events, reduce false positives, and coordinate with data owners for remediation.
• Operate FortiRecon dark Web/deep web monitoring tools and services to detect leaked credentials, source code, access tokens, customer data, and brand impersonations.
• Correlate findings with SIEM/UEBA and trigger SOAR playbooks for credential resets, takedowns, and stakeholder notifications. Hands-on experience with ArcSight SIEM (use cases, parsers, rules, dashboards).
• Administer and optimize ArcSight (SmartConnectors, parsers, correlation rules, dashboards, reports).
• Deploy, configure, and manage enterprise Thales HSM.
• Implement and manage 42Gears MDM/EMM/MTD solution for enterprise mobility security.
• Integrate 42Gears Mobile Threat Defense (MTD) to detect malware, phishing, network-based attacks, and OS vulnerabilities using behavioral and ML-based analysis.
• Implement F5 Anti-DDoS appliances in HA mode at DC perimeter/gateway.
• Configure behavior-based DDoS detection with sub-second response. Strong expertise in Checkpoint Harmony, Trend Micro HIPS, Fortinet AV, Arcon PAM, Force point DLP, TrendMicro DDEI Email Security, IBM Guardian DAM, Fortinet UTM, Zscaler Zero Trust, Thales HSM, 42Gears MDM/EMM/MTD and Application Security technologies.

• Experience in SOAR playbook development and security automation.

• Understanding of networking, OS internals, malware behavior, and threat intelligence.

• Familiarity with MITRE ATT&CK, NIST, ISO 27001, TTP and other security frameworks.
• Strong analytical, investigative, and documentation skills.
• Operate Trend Micro DDEI email security (BEC, spoofing controls, sandboxing; DMARC/DKIM/SPF hygiene).

Good to Have

SIEM, UEBA, SOAR, Endpoint Security, Threat Intelligence, Privileged Access Management, and Application/Host-based security solutions. This role requires strong technical expertise in ArcSight SIEM, EDR, DLP, PAM, Email Security, Anti Apt, WAF, Application Security, Defense-In Depth, Zero Trust and other enterprise security technologies

Responsibility of / Expectations from the Role** -

1. Administer, configure, and optimize ArcSight SIEM, ArcSight UEBA, ArcSight SOAR playbooks including connectors, parsers, correlation rules, dashboards, and reports.

2. AppSec fundamentals: OWASP Top 10, API Security Top 10, SAST/DAST tooling, secure coding patterns and SBOM practices. Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA, Container Security). Perform CI/CD Security & SDLC Integration (SAST, DAST, SCA, Container Security)

3. Perform network-level vulnerability assessments by Tenable on servers, network devices, firewalls, routers, switches, databases, and OS components.

4. Strong expertise in Checkpoint Harmony, Trend Micro HIPS, Fortinet AV, Arcon PAM, Force point DLP, TrendMicro DDEI Email Security, IBM Guardian DAM, Fortinet UTM, Zscaler Zero Trust, Thales HSM, 42Gears MDM/EMM/MTD and Application Security technologies.

5. Familiarity with MITRE ATT&CK, NIST, ISO 27001, TTP and other security frameworks.

6. Operate Trend Micro DDEI email security (BEC, spoofing controls, sandboxing; DMARC/DKIM/SPF hygiene).