Senior Engineer - Cyber Security

Newgen; Dadri; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Newgen in India seeks an experienced Endpoint Security Specialist to manage enterprise endpoint protection, SOC operations, vulnerability management, and security monitoring. You will administer CrowdStrike Falcon, Sophos Central, and ManageEngine solutions, integrate SIEMs, and lead incident response while ensuring policy compliance.

You will coordinate with IT and security teams to maintain ISO 27001/NIST-aligned practices, produce security reports, and support audits with thorough

Qualifications

• Experience in endpoint security administration and SOC operations.
• Proficiency with CrowdStrike, Sophos, and ManageEngine products.
• Experience with SIEM integration and log analysis.
• Familiarity with ISO 27001 & NIST frameworks.

Responsibilities

• Administer enterprise Endpoint Security solutions including CrowdStrike Falcon and Sophos Central.
• Manage lifecycle of CrowdStrike Falcon deployments and RTR/Detection & Response workflows.
• Perform Sophos Endpoint Administration and policy management.
• Integrate endpoint platforms with SIEM for centralized monitoring.
• Oversee daily SOC activities, incident triage, and resolution within SLAs.
• Handle security tickets via ITSM platforms with timely updates.
• Administer ManageEngine Endpoint Central for device management and patch deployment.
• Plan and monitor patch management across Windows, Linux, and macOS.
• Manage BitLocker deployment, recovery keys, and encryption monitoring.
• Conduct vulnerability management including risk analysis and remediation coordination.
• Enforce Data Loss Prevention policies and prevent data exfiltration.
• Generate daily/weekly/monthly security & compliance reports for management.
• Provide L1/L2 remote technical support for endpoint security incidents.
• Coordinate with IT, SOC, and vendors to resolve incidents and implement enhancements.
• Assist in ISO/NIST-aligned security practices and maintain runbooks.
• Maintain endpoint security docs, audit evidence, and runbooks.
• Support audits with endpoint security evidence and compliance reporting.

Skills

CrowdStrike Falcon

Sophos Central

SOC Operations

Vulnerability Management

SIEM Integration

Managed Endpoint Central

BitLocker

Patch Management

DLP

Security Compliance

Remote Support

Windows Admin

Server Administration

Automation/API

Tools

CrowdStrike Falcon

Sophos Central

ManageEngine Endpoint Central

API Integration

Job description

Endpoint Security, SOC & Security Operations

Role Summary

Will be responsible for managing enterprise endpoint security solutions, SOC operations, vulnerability management, security monitoring, compliance reporting, and end-user security support. The role involves administration of CrowdStrike, Sophos, ManageEngine solutions, SIEM integrations, incident response, and ensuring adherence to organizational security policies and compliance requirements.

Key Responsibilities

• Administration and manage enterprise Endpoint Security solutions including CrowdStrike Falcon and Sophos Central, ensuring endpoint protection, policy enforcement, threat prevention, and security compliance.
• Manage the complete lifecycle of CrowdStrike Falcon, including sensor deployment, policy configuration, Real-Time Response (RTR), Host Isolation, Detection & Response, IOC investigation, Custom IOA management, Falcon Fusion workflows, Identity Protection, and endpoint health monitoring.
• Perform Sophos Endpoint Administration, including policy creation, device encryption, web control, application control, peripheral/device control, tamper protection, antivirus management, and threat remediation.
• Integration of endpoint security platforms with SIEM solutions for centralized log collection, security event correlation, incident monitoring, and threat visibility.
• Manage daily Security Operations (SOC) activities, including monitoring security alerts, incident triage, investigation, containment, remediation, and closure of security incidents within defined SLAs.
• Handle security tickets through ITSM platforms, ensuring timely investigation, user communication, documentation, and resolution.
• Administration of ManageEngine Endpoint Central (Desktop Central) for endpoint management, software deployment, asset inventory, remote troubleshooting, configuration management, compliance monitoring, and patch deployment.
• Plan, deploy, and monitor enterprise-wide Patch Management activities for Windows, Linux and MAC operating systems and third-party applications to maintain security compliance.
• Manage BitLocker Drive Encryption, including deployment, recovery key management, encryption compliance monitoring, policy enforcement, and troubleshooting.
• Perform enterprise Vulnerability Management, including vulnerability assessment, risk analysis, remediation coordination, validation, compliance reporting, and closure tracking.
• Manage enterprise Data Loss Prevention (DLP) policies to prevent unauthorized data movement through USB devices, removable media, printing, clipboard, email, and file transfer channels.
• Generate and present Daily, Weekly, and Monthly Security Compliance Reports, including Antivirus Compliance, Encryption Compliance, Vulnerability Compliance, Patch Compliance, Endpoint Health, Security Incident Metrics, and Executive Dashboards for management review.
• Provide L1/L2 Remote Technical Support for endpoint security incidents, malware infections, encryption issues, policy conflicts, application whitelisting, endpoint performance, and security-related user issues.
• Coordinate with internal IT teams, Infrastructure teams, SOC analysts, and external vendors to resolve complex security incidents and implement security enhancements.
• Assist in implementing security best practices aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and organizational information security policies.
• Maintain endpoint security documentation, SOPs, security runbooks, knowledge base articles, audit evidence, and operational reports.
• Supported internal and external audits by providing endpoint security evidence, compliance reports, configuration details, and security documentation.

Experience

• 6-8 Years of IT Infrastructure / Cyber Security Experience
• Minimum 3+ Years of Hands-on Experience in Endpoint Security & SOC Operations

Required Skills

• CrowdStrike Falcon EDR/XDR Administration
• Sophos Central Administration
• SOC Operations & Incident Response
• Vulnerability Management
• SIEM Integration & Log Analysis
• ManageEngine Endpoint Central/UEM
• BitLocker Administration
• Patch Management
• Device Control & Application Control
• Data Loss Prevention (DLP)
• Endpoint Security Management
• Security Compliance Reporting
• Remote Support Operations
• Windows & Server Administration
• API Integration & Security Automation