Security Engineer II

Theapexgroup; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

The Apex Group is seeking a Senior Security Engineer - Platform to own and evolve our global security platforms across endpoint, identity, email, PAM, network, and cloud security. You will drive automation, platform maturity, and alignment with security architecture and regulatory requirements.

You will collaborate with Security Architecture, Cloud & Infrastructure teams, SOC, and governance functions to ensure scalable controls, Zero Trust adoption, and ongoing security modernization

Qualifications

• 7+ years of experience in information or cyber security engineering.
• Experience engineering and operating enterprise-scale security platforms.
• Hands-on experience with Microsoft Defender Suite, Entra ID, CyberArk, Netskope, Mimecast/Proofpoint/Tessian, and Qualys.

Responsibilities

• Own the implementation, optimization, and operation of security platforms.
• Drive automation via scripting, APIs, and integrations.
• Support security maturity, regulatory and audit requirements.
• Collaborate with Security Architecture, Cloud & Infra, SOC, and governance teams.

Skills

Information Security

Cyber Security

Security Engineering

Zero Trust

IAM

PAM

SIEM

Microsoft Defender

Tools

Microsoft Defender

Microsoft Entra ID

CyberArk

Netskope

Mimecast

Proofpoint

Tessian

Qualys

SIEM

Exabeam

Sentinel

Job description

The Apex Group was established in Bermuda in 2003 and is now one of the world's largest fund administration and middle office solutions providers.

Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion.

That's why, at Apex Group, we will do more than simply 'empower' you. We will work to supercharge your unique skills and experience.

Take the lead and we'll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities.

For our business, for clients, and for you

The Role:

The Security Engineer - Platform is a senior technical role within Apex Group's Security Engineering function, responsible for engineering, operating, and continuously improving the organization's global security platforms and capabilities.

The role owns the implementation, optimization, automation, and operational effectiveness of enterprise security technologies spanning endpoint security, identity and access management, email security, privileged access management, network security, cloud security, vulnerability management, and security monitoring.

The successful candidate will play a critical role in advancing Apex's security maturity, supporting regulatory and audit requirements, enabling secure business growth, and reducing cyber risk across a global technology estate. This role works closely with Security Architecture, Cloud & Infrastructure Engineering, Identity & Access Governance (IPAM), SOC, and Technology teams to ensure security controls are integrated, scalable, and aligned to Apex's strategic security roadmap.

The position also contributes to major strategic initiatives including Zero Trust adoption, security platform modernization, mergers and acquisitions (M&A) integration activities, cloud transformation programs, CyberArk maturity improvements, Microsoft security platform enablement, and SIEM modernization initiatives.

Key duties and responsibilities:

Security Platform Ownership & Engineering

• Engineer, implement, configure, maintain, and continuously improve enterprise security platforms across the Apex Group estate.
• Act as a technical owner and subject matter expert for designated security technologies and services.
• Drive platform maturity initiatives to improve effectiveness, coverage, automation, resilience, and user experience.
• Develop and maintain platform standards, security baselines, operating procedures, and engineering documentation.
• Ensure security platforms remain aligned to security architecture principles, regulatory requirements, and evolving threat landscapes.
• Identify opportunities to automate operational activities through scripting, APIs, orchestration, and platform integrations.

Enterprise Security Technologies

Provide senior engineering support across technologies including:

• Microsoft Defender Suite (Endpoint, Identity, Cloud Apps, XDR)
• Microsoft Entra ID Security
• IGA/PAM Management tools
• Email Security Platforms (Mimecast, Proofpoint, Tessian or equivalent)
• Network Security & Zero Trust Platforms (Netskope, SWG, CASB, ZTNA/NPA)
• Vulnerability Management Platforms (Qualys or equivalent)
• Cloud Security Posture Management (CSPM) platforms for cloud security visibility, configuration governance, compliance monitoring, and risk reduction
• Data Security Posture Management (DSPM) solutions for data discovery, classification, security monitoring, and data risk management
• Security Ratings & Third-Party Risk Platforms
• SIEM and Security Monitoring Platforms (Exabeam, Sentinel and related technologies)
• Security Awareness and Human Risk Management platforms

Experience and Knowledge:

Essential

• 7+ years of experience in Information Security, Cyber Security, Security Engineering, or related technical security roles.
• Demonstrable experience engineering and operating enterprise-scale security platforms within complex global organizations.
• Strong hands-on experience with Microsoft and third-party security technologies including:
  • Microsoft Defender Suite
  • Microsoft Entra ID
  • CyberArk
  • Netskope
  • Mimecast, Proofpoint or Tessian
  • Qualys
  • SIEM and Security Monitoring platforms
• Strong understanding of:
  • Zero Trust security models
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Conditional Access
  • MFA
  • SSO and Identity Federation
  • Endpoint Security
  • Email Security
  • Vulnerability Management
  • Security Monitoring & Detection Engineering
  • Cloud Security
• Experience supporting Azure, AWS, OCI, and hybrid environments.
• Experience with PowerShell, Python, APIs, automat