Security Engineer / Cybersecurity Specialist (Pune)

Codvo.ai; Pune District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Codvo.ai is looking for an experienced Security Engineer / Cybersecurity Specialist to manage and enhance cybersecurity posture in Pune, Maharashtra. The ideal candidate will have over 8 years of hands-on experience in endpoint security, threat detection, and vulnerability management.

In this role, you will be responsible for optimizing endpoint security solutions, monitoring security alerts, and ensuring compliance with security standards. Strong knowledge of security frameworks like NIST and ISO 27001 is essential.

The position offers a collaborative work environment and opportunities for continuous improvement in cybersecurity strategies.

Qualifications

• 8+ years of experience in cybersecurity or security engineering.
• Strong hands-on experience with EDR/XDR tools and application control solutions.
• Experience in SOC operations, incident response, and threat hunting.

Responsibilities

• Manage and optimize endpoint security solutions.
• Monitor, investigate, and respond to security alerts.
• Ensure compliance with organizational and regulatory security standards.

Skills

EDR/XDR tools

Vulnerability management tools

Identity and access management

Cloud security knowledge

Education

Relevant certifications (CEH, CISSP, Security+, AZ-500)

Tools

SentinelOne

Microsoft Defender

ThreatLocker

Tenable

BitLocker

Cove Data Protection

Job description

Job Title: Security Engineer / Cybersecurity Specialist

We are seeking an experienced and proactive Security Engineer to manage and enhance our organization’s cybersecurity posture. The ideal candidate will have strong hands‑on experience with endpoint security, threat detection, vulnerability management, and SOC coordination, along with a solid understanding of modern security frameworks and best practices.

Key Responsibilities

Endpoint & Threat Protection

• Manage and optimize endpoint security solutions including ThreatLocker, SentinelOne, Microsoft Defender, Huntress, and Field Effect.
• Monitor, investigate, and respond to security alerts, threats, and suspicious activities.
• Perform root cause analysis and implement corrective and preventive actions.
• Continuously improve endpoint protection strategies aligned with Zero Trust principles.

Vulnerability & Risk Management

• Operate and manage vulnerability assessment tools such as Tenable.
• Identify, prioritize, and remediate security vulnerabilities across systems and infrastructure.
• Collaborate with IT teams to ensure timely patching and risk mitigation.

Identity & Access Security

• Administer MFA and identity protection solutions (e.g., Duo).
• Monitor and audit user activities using tools like ADAudit Plus.
• Enforce least privilege access and identity governance best practices.

Security Monitoring & SOC Coordination

• Review and analyze SOC reports from external security providers.
• Correlate alerts across multiple security tools and platforms.
• Drive incident response actions based on findings.
• Enhance detection rules, playbooks, and response workflows.

Security Awareness & Compliance

• Manage security awareness programs using platforms like KnowBe4.
• Conduct phishing simulations and track user risk metrics.
• Ensure compliance with organizational and regulatory security standards.

Data Protection & Encryption

• Manage endpoint encryption using BitLocker.
• Oversee backup and recovery solutions such as Cove Data Protection.
• Ensure data integrity, availability, and secure storage practices.

Reporting & Continuous Improvement

• Prepare and present security reports, dashboards, and metrics.
• Provide insights into threat trends, vulnerabilities, and risk posture.
• Recommend improvements to security architecture, tools, and processes.

Required Skills & Experience

• 8+ years of experience in cybersecurity or security engineering.
• Strong hands‑on experience with:
  • EDR/XDR tools (e.g., SentinelOne, Microsoft Defender).
  • Application control solutions (e.g., ThreatLocker).
  • Vulnerability management tools (e.g., Tenable).
• Experience in SOC operations, incident response, and threat hunting.
• Knowledge of identity and access management (MFA, auditing tools).
• Familiarity with backup, encryption, and endpoint security practices.
• Strong understanding of security frameworks such as NIST and ISO 27001.

Preferred Qualifications (Good to Have)

• Experience with MDR providers such as Huntress or Field Effect.
• Knowledge of cloud security (Azure, AWS, GCP).
• Relevant certifications: CEH, CISSP, Security+, AZ-500.

Soft Skills

• Strong analytical and problem‑solving abilities.
• Ability to manage critical incidents and escalations effectively.
• Excellent communication and stakeholder management skills.
• Leadership mindset with mentoring capabilities.