Security Engineer – L2 | Cyber Security / SOC - 5 Years

Asian Hires; Mumbai; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Asian Hires is seeking an experienced Security Engineer – L2 for Goregaon, Mumbai. The role requires handling escalated security incidents and supporting enterprise security technologies across EDR, WAF, Firewall, VPN and DLP.

You will collaborate with SOC, L1/L3 teams and vendors while maintaining incident reports and participating in security audits. Immediate joiners preferred; local Mumbai candidates only.

Qualifications

• 5+ years of L2 security engineering or security operations experience.
• Hands-on experience with enterprise security technologies.
• Strong incident handling and troubleshooting skills.

Responsibilities

• Handle and troubleshoot L2 security incidents and escalations.
• Analyse security alerts and perform incident triage and investigation.
• Support and troubleshoot EDR, Firewall, Proxy, VPN and DLP solutions.
• Investigate incidents, identify root causes and coordinate remediation.
• Support vulnerability assessments and remediation activities.
• Coordinate with SOC, L1/L3 teams, stakeholders and vendors.
• Maintain incident reports, SOPs and technical documentation.
• Assist security audits and compliance activities.

Skills

Security incident handling

Troubleshooting

Security monitoring

Vulnerability management

Incident resolution

Education

Bachelor's Degree or Diploma in Engineering

Tools

CrowdStrike

SentinelOne

Microsoft Defender for Office 365

Fortinet

Forcepoint

Job description

Candidate Location: Mumbai Local Candidates Only

Experience: 5+ Years

Job Location: Goregaon, Mumbai

Working: 6 Days | 24×7 Rotational Shifts

Level: L2 Security Engineer

Joining: Immediate Joiners Preferred

Interview: 1st Virtual | 2nd Face-to-Face

BGV: Mandatory

Role Overview

We are looking for an experienced Security Engineer – L2 with strong hands‑on experience in security incident handling, troubleshooting, security monitoring and vulnerability management.

The role will involve handling escalated security incidents and supporting enterprise security technologies including EDR, WAF, Firewall, Proxy, VPN and DLP. The engineer will work closely with SOC, L1/L3 teams, internal stakeholders and vendors.

Key Responsibilities

• Handle and troubleshoot L2 security incidents and escalations.
• Analyse security alerts and perform incident triage and investigation.
• Support and troubleshoot WAF, EDR, Firewall, Proxy, VPN and DLP solutions.
• Investigate incidents, identify root causes and coordinate remediation.
• Support VAPT / vulnerability assessment and remediation activities.
• Handle SOC, DLP and VAPT tickets.
• Analyse phishing incidents and support email-security controls.
• Validate firewall/security policies and blocked/allowed connections.
• Support security upgrades, changes and policy enhancements.
• Coordinate with SOC, L1/L3 teams, stakeholders and vendors.
• Maintain incident reports, SOPs and technical documentation.
• Support security audits and compliance activities.
• Improve security monitoring and incident-response processes.

Mandatory Technical Skills

• EDR: CrowdStrike / SentinelOne
• Vulnerability Assessment / VAPT
• Firewall & Security Policy Validation
• SOC / Security Incident Monitoring
• Email Security: Microsoft Defender for Office 365, DMARC, phishing analysis
• Proxy: Fortinet / Forcepoint
• DLP
• SASE
• PIM / PAM
• MDM / Antivirus Security
• Strong L2 troubleshooting and incident-resolution capability.

Candidate Requirements

• 5+ years overall experience with relevant L2 Security Engineering / Security Operations experience.
• Strong hands‑on enterprise security technology experience.
• Strong incident handling and troubleshooting skills.
• Bachelor's Degree / Diploma in Engineering.
• Comfortable with 24×7 rotational shifts and 6-day working.
• Local Mumbai candidates only.
• Immediate joiners preferred.

Important: This is an L2 hands‑on troubleshooting and incident-resolution role. Candidates whose experience is limited to alert monitoring, SOC monitoring or ticket forwarding without hands‑on troubleshooting should not be considered.