Security Engineer / Cybersecurity Specialist

Codvo.ai; India; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Codvo.ai is seeking an experienced Security Engineer to manage and enhance our cybersecurity posture. You will oversee endpoint protection, threat detection, vulnerability management, and SOC coordination to safeguard our digital assets.

The role requires hands-on experience with EDR/XDR tools, vulnerability scanners, identity security, data protection, and knowledge of NIST/ISO 27001. You will contribute to security architecture, incident response, and security awareness initiatives.

Qualifications

• 4–5 years of hands-on cybersecurity/ security engineering experience.
• Strong experience with EDR/XDR and endpoint protection.
• Experience in SOC operations, IR and threat hunting.
• Familiarity with NIST and ISO 27001 frameworks.

Responsibilities

• Manage and optimize endpoint security and threat protection.
• Operate vulnerability assessment tools and coordinate patching.
• Administer MFA and identity protection; audit user activities.
• Coordinate SOC activities and drive incident response.
• Lead security reporting and continuous improvement.

Skills

EDR/XDR tools

Application control

Vulnerability management

SOC operations

Incident response

Threat hunting

Identity & access management

Backup & encryption

Security frameworks

Zero Trust

Tools

ThreatLocker

SentinelOne

Microsoft Defender

Huntress

Field Effect

Tenable

ADAudit Plus

KnowBe4

Cove Data Protection

BitLocker

Duo

Job description

Job Title: Security Engineer / Cybersecurity Specialist

We are seeking an experienced and proactive Security Engineer to manage and enhance our organization's cybersecurity posture. The ideal candidate will have strong hands-on experience with endpoint security, threat detection, vulnerability management, and SOC coordination, along with a solid understanding of modern security frameworks and best practices.

Key Responsibilities

• Endpoint & Threat Protection: Manage and optimize endpoint security solutions including ThreatLocker, SentinelOne, Microsoft Defender, Huntress, and Field Effect. Monitor, investigate, and respond to security alerts, threats, and suspicious activities. Perform root cause analysis and implement corrective and preventive actions. Continuously improve endpoint protection strategies aligned with Zero Trust principles.
• Vulnerability & Risk Management: Operate and manage vulnerability assessment tools such as Tenable. Identify, prioritize, and remediate security vulnerabilities across systems and infrastructure. Collaborate with IT teams to ensure timely patching and risk mitigation.
• Identity & Access Security: Administer MFA and identity protection solutions (e.g., Duo). Monitor and audit user activities using tools like ADAudit Plus. Enforce least privilege access and identity governance best practices.
• Security Monitoring & SOC Coordination: Review and analyze SOC reports from external security providers. Correlate alerts across multiple security tools and platforms. Drive incident response actions based on findings. Enhance detection rules, playbooks, and response workflows.
• Security Awareness & Compliance: Manage security awareness programs using platforms like KnowBe4. Conduct phishing simulations and track user risk metrics. Ensure compliance with organizational and regulatory security standards.
• Data Protection & Encryption: Manage endpoint encryption using BitLocker. Oversee backup and recovery solutions such as Cove Data Protection. Ensure data integrity, availability, and secure storage practices.
• Reporting & Continuous Improvement: Prepare and present security reports, dashboards, and metrics. Provide insights into threat trends, vulnerabilities, and risk posture. Recommend improvements to security architecture, tools, and processes.
• Required Skills & Experience: 4-5 years of experience in cybersecurity or security engineering. Strong hands-on experience with: EDR/XDR tools (e.g., SentinelOne, Microsoft Defender), Application control solutions (e.g., ThreatLocker), Vulnerability management tools (e.g., Tenable). Experience in SOC operations, incident response, and threat hunting. Knowledge of identity and access management (MFA, auditing tools). Familiarity with backup, encryption, and endpoint security practices. Strong understanding of security frameworks such as NIST and ISO 27001.

Preferred Qualifications (Good to Have)

• Experience with MDR providers such as Huntress or Field Effect.
• Knowledge of cloud security (Azure, AWS, GCP).
• Relevant certifications: CEH, CISSP, Security+, AZ-500.

Soft Skills

• Strong analytical and problem-solving abilities.
• Ability to manage critical incidents and escalations effectively.
• Excellent communication and stakeholder management skills.
• Leadership mindset with mentoring capabilities.