Security Engineer / Cybersecurity Specialist

Codvo Private Limited; Pune District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A leading cybersecurity firm based in Pune is seeking an experienced Security Engineer to enhance and manage the organization's cybersecurity posture. The role requires strong hands-on experience with endpoint security, threat detection, and vulnerability management. Responsibilities include managing security solutions, conducting security assessments, and collaborating with IT teams for risk mitigation. Ideal candidates should possess 4-5 years of relevant experience and have knowledge of security frameworks such as NIST and ISO 27001.

Qualifications

• 4-5 years of experience in cybersecurity or security engineering.
• Strong hands-on experience with EDR/XDR tools.
• Experience in SOC operations, incident response, and threat hunting.

Responsibilities

• Manage and optimize endpoint security solutions.
• Identify and remediate security vulnerabilities.
• Administer MFA and identity protection solutions.

Skills

Experience in cybersecurity or security engineering

Hands-on with EDR/XDR tools

Application control solutions

Vulnerability management tools

Incident response and threat hunting

Knowledge of identity and access management

Familiarity with backup and encryption practices

Tools

SentinelOne

Microsoft Defender

ThreatLocker

Tenable

Job description

# Security Engineer / Cybersecurity SpecialistPune, MaharashtraWork Type:Full TimeJob Title: Security Engineer / Cybersecurity SpecialistRole OverviewWe are seeking an experienced and proactive Security Engineer to manage and enhance our organization’s cybersecurity posture. The ideal candidate will have strong hands-on experience with endpoint security, threat detection, vulnerability management, and SOC coordination, along with a solid understanding of modern security frameworks and best practices.\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Key ResponsibilitiesEndpoint & Threat Protection• Manage and optimize endpoint security solutions including ThreatLocker, SentinelOne, Microsoft Defender, Huntress, and Field Effect• Monitor, investigate, and respond to security alerts, threats, and suspicious activities• Perform root cause analysis and implement corrective and preventive actions• Continuously improve endpoint protection strategies aligned with Zero Trust principles\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Vulnerability & Risk Management• Operate and manage vulnerability assessment tools such as Tenable• Identify, prioritize, and remediate security vulnerabilities across systems and infrastructure• Collaborate with IT teams to ensure timely patching and risk mitigation\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Identity & Access Security• Administer MFA and identity protection solutions (e.g., Duo)• Monitor and audit user activities using tools like ADAudit Plus• Enforce least privilege access and identity governance best practices\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Security Monitoring & SOC Coordination• Review and analyze SOC reports from external security providers• Correlate alerts across multiple security tools and platforms• Drive incident response actions based on findings• Enhance detection rules, playbooks, and response workflows\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Security Awareness & Compliance• Manage security awareness programs using platforms like KnowBe4• Conduct phishing simulations and track user risk metrics• Ensure compliance with organizational and regulatory security standards\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Data Protection & Encryption• Manage endpoint encryption using BitLocker• Oversee backup and recovery solutions such as Cove Data Protection• Ensure data integrity, availability, and secure storage practices\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Reporting & Continuous Improvement• Prepare and present security reports, dashboards, and metrics• Provide insights into threat trends, vulnerabilities, and risk posture• Recommend improvements to security architecture, tools, and processes\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Required Skills & Experience• 4-5 years of experience in cybersecurity or security engineering• Strong hands-on experience with:o EDR/XDR tools (e.g., SentinelOne, Microsoft Defender)o Application control solutions (e.g., ThreatLocker)o Vulnerability management tools (e.g., Tenable)• Experience in SOC operations, incident response, and threat hunting• Knowledge of identity and access management (MFA, auditing tools)• Familiarity with backup, encryption, and endpoint security practices• Strong understanding of security frameworks such as NIST and ISO 27001\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Preferred Qualifications (Good to Have)• Experience with MDR providers such as Huntress or Field Effect• Knowledge of cloud security (Azure, AWS, GCP)• Relevant certifications: CEH, CISSP, Security+, AZ-500\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_Soft Skills• Strong analytical and problem-solving abilities• Ability to manage critical incidents and escalations effectively• Excellent communication and stakeholder management skills• Leadership mindset with mentoring capabilities**Note- Please apply via our official careers portal only, as applications sent directly to executives may not be considered.**