Security Engineer / Cybersecurity Specialist

Codvo.ai; Pune District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Codvo.ai is seeking an experienced Security Engineer to enhance our cybersecurity posture. The role involves managing endpoint security, performing threat detection, and coordinating SOC efforts.

The ideal candidate has 4-5 years in cybersecurity, strong hands-on experience with various security tools, and a solid understanding of security frameworks like NIST and ISO 27001.

Soft skills such as leadership, analytical abilities, and excellent communication are essential.

Qualifications

• 4-5 years of experience in cybersecurity or security engineering.
• Strong hands-on experience with endpoint security, threat detection, vulnerability management, and SOC coordination.
• Strong understanding of security frameworks such as NIST and ISO 27001.

Responsibilities

• Manage and optimize endpoint security solutions including ThreatLocker and SentinelOne.
• Perform root cause analysis and implement corrective actions.
• Identify and remediate security vulnerabilities across systems.

Skills

EDR/XDR tools (e.g., SentinelOne, Microsoft Defender)

Application control solutions (e.g., ThreatLocker)

Vulnerability management tools (e.g., Tenable)

Incident response

Threat hunting

Identity management (MFA, auditing tools)

Backup and encryption practices

Security frameworks (NIST, ISO 27001)

Education

Relevant certifications: CEH, CISSP, Security+, AZ-500

Job description

Job Title: Security Engineer / Cybersecurity Specialist

Role Overview

We are seeking an experienced and proactive Security Engineer to manage and enhance our organization’s cybersecurity posture. The ideal candidate will have strong hands‑on experience with endpoint security, threat detection, vulnerability management, and SOC coordination, along with a solid understanding of modern security frameworks and best practices.

Key Responsibilities

Endpoint & Threat Protection

• Manage and optimize endpoint security solutions including ThreatLocker, SentinelOne, Microsoft Defender, Huntress, and Field Effect
• Monitor, investigate, and respond to security alerts, threats, and suspicious activities
• Perform root cause analysis and implement corrective and preventive actions
• Continuously improve endpoint protection strategies aligned with Zero Trust principles

Vulnerability & Risk Management

• Operate and manage vulnerability assessment tools such as Tenable
• Identify, prioritize, and remediate security vulnerabilities across systems and infrastructure
• Collaborate with IT teams to ensure timely patching and risk mitigation

Identity & Access Security

• Administer MFA and identity protection solutions (e.g., Duo)
• Monitor and audit user activities using tools like ADAudit Plus
• Enforce least privilege access and identity governance best practices

Security Monitoring & SOC Coordination

• Review and analyze SOC reports from external security providers
• Correlate alerts across multiple security tools and platforms
• Drive incident response actions based on findings
• Enhance detection rules, playbooks, and response workflows

Security Awareness & Compliance

• Manage security awareness programs using platforms like KnowBe4
• Conduct phishing simulations and track user risk metrics
• Ensure compliance with organizational and regulatory security standards

Data Protection & Encryption

• Manage endpoint encryption using BitLocker
• Oversee backup and recovery solutions such as Cove Data Protection
• Ensure data integrity, availability, and secure storage practices

Reporting & Continuous Improvement

• Prepare and present security reports, dashboards, and metrics
• Provide insights into threat trends, vulnerabilities, and risk postureRecommend improvements to security architecture, tools, and processes

Required Skills & Experience

• 4-5 years of experience in cybersecurity or security engineering
• Strong hands‑on experience with:
• EDR/XDR tools (e.g., SentinelOne, Microsoft Defender)
• Application control solutions (e.g., ThreatLocker)
• Vulnerability management tools (e.g., Tenable)
• Experience in SOC operations, incident response, and threat hunting
• Knowledge of identity and access management (MFA, auditing tools)
• Familiarity with backup, encryption, and endpoint security practices
• Strong understanding of security frameworks such as NIST and ISO 27001

Preferred Qualifications (Good to Have)

• Experience with MDR providers such as Huntress or Field Effect
• Knowledge of cloud security (Azure, AWS, GCP)
• Relevant certifications: CEH, CISSP, Security+, AZ-500

Soft Skills

• Strong analytical and problem-solving abilities
• Ability to manage critical incidents and escalations effectively
• Excellent communication and stakeholder management skills
• Leadership mindset with mentoring capabilities