Security Engineer / Analyst

Lodha; Mumbai City; In loco; INR 1.200.000 - 2.400.000; Tempo pieno

Descrizione del lavoro

Lodha is seeking a Security Analyst / Security Engineer in Mumbai to define and manage the enterprise information security program, protecting critical assets and systems. The role collaborates with the CISO and business units to drive risk management, compliance, and incident response, fostering a security-first culture across the organization.

The incumbent will oversee governance, endpoint protection, threat monitoring, and regulatory compliance, with hands-on work across EDR, AV, DLP, and

Competenze

• 5–10 years of experience in Endpoint Security or Cybersecurity operations.
• Hands-on experience with EDR/AV solutions.
• Strong hands-on experience implementing, managing, and monitoring DLP solutions.
• Familiarity with SIEM tools, vulnerability management, and patch management.
• Strong analytical, troubleshooting, and communication skills.

Mansioni

• Develop, implement, and continuously enhance a comprehensive information security strategy aligned with business objectives.
• Administer endpoint security solutions including EDR, AV, DLP, SSE, and other endpoint protection tools.
• Monitor security alerts and coordinate incident response with SOC and IT teams.
• Remediate endpoint vulnerabilities and ensure patch compliance; support audits.
• Ensure compliance with applicable laws, regulations, and industry standards; coordinate audit remediation.
• Generate periodic reports on endpoint security posture, incidents, and compliance status.

Conoscenze

5-10 years of experience in Endpoint/C

EDR/AV solutions

DLP solutions

SIEM tools

Vulnerability & patch management

Analytical & troubleshooting skills

Communication skills

Strumenti

EDR

AV

DLP

SSE

SIEM

Patch management tools

Descrizione del lavoro

Job Summary ::

The Security Analyst / Security Engineer will be responsible for defining, implementing, and managing the organizations enterprise information security vision, strategy, and programs to ensure that information assets and technology systems are adequately protected.

The role will work closely with the CISO, senior security leadership, and business units to drive risk assessment, risk management, compliance, and incident response initiatives. The incumbent will oversee the Audit, development and enforcement of security policies, standards, and procedures, while fostering a strong security-first culture across the organization.

Key Responsibilities ::

Security Strategy & Governance

• Develop, implement, and continuously enhance a comprehensive information security strategy aligned with business objectives.


• Establish security governance frameworks, standards, and operating models.


• Foster a security-first mindset across the organization through leadership and advocacy.

Endpoint Security Management

• Administer and manage endpoint security solutions including EDR, AV, DLP, SSE, and other endpoint protection tools.


• Ensure deployment, configuration, and health monitoring of endpoint security agents across endpoints and servers.


• Implement and enforce endpoint security policies and best practices.

Threat Monitoring & Incident Response

• Monitor security alerts generated from endpoint security tools.


• Investigate suspicious activities and coordinate with SOC and IT teams for incident response.


• Track incidents until closure and document Root Cause Analysis (RCA) and remediation actions.

Vulnerability & Compliance Management

• Work with IT teams to remediate endpoint vulnerabilities and ensure patch compliance.


• Support internal audits and ensure adherence to security policies and regulatory requirements.

Compliance & Regulatory Management

• Ensure compliance with applicable laws, regulations, and industry standards.


• Support internal and external audits and regulatory reviews.


• Coordinate remediation of audit findings and control gaps.


• Should have knowledge of Cyber CSCRF, DPDP, ISO 270001 framework.

Reporting & Documentation

• Generate periodic reports on endpoint security posture, incidents, and compliance status.


• Maintain documentation related to security incidents, policies, and tool configurations.

Experience & Skills

• 5-10 years of experience in Endpoint Security or Cybersecurity operations.


• Hands-on experience with EDR/AV solutions.


• Strong hands-on experience in implementing, managing, and monitoring Data Loss Prevention (DLP) solutions.


• Familiarity with SIEM tools, vulnerability management, and patch management is an advantage.


• Strong analytical, troubleshooting, and communication skills.

Preferred Certifications

• CompTIA Security+


• CEH (Certified Ethical Hacker)


• Other relevant cybersecurity certifications.