Sr Engineer - Cyber Security

Newgen; Dadri; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Newgen is seeking an experienced security operations professional to manage endpoint security solutions, SOC activities, vulnerability management, and compliance reporting. You will administer CrowdStrike, Sophos, and ManageEngine endpoints, integrate with SIEM, and handle incident response with a focus on policy enforcement and risk reduction.

Responsibilities include patch management, DLP, encryption, and audit-ready documentation, while coordinating with internal teams and vendors to enhance

Qualifications

• 6-8 years IT Infrastructure / Cyber Security experience.
• Minimum 3+ years hands-on experience in Endpoint Security SOC Operations.

Responsibilities

• Administer CrowdStrike Falcon and Sophos Central endpoints for policy enforcement and threat prevention.
• Manage lifecycle of CrowdStrike Falcon including RTR, isolation, and IOC investigations.
• Integrate endpoint security platforms with SIEM for centralized log collection and threat visibility.
• Oversee SOC operations: monitor alerts, triage incidents, containment, remediation, and closure within SLAs.
• Handle security tickets via ITSM with timely investigation and resolution.
• Administer ManageEngine Endpoint Central for deployment, inventory, patching, and remote troubleshooting.
• Plan and monitor enterprise patch management across Windows, Linux, and Mac.
• Manage BitLocker deployment and encryption compliance.
• Conduct vulnerability management, risk analysis, remediation coordination, and reporting.
• Oversee DLP policies to prevent data exfiltration via USB, printing, and network channels.
• Generate security compliance reports and executive dashboards.
• Provide L1/L2 remote technical support for endpoint security incidents.
• Coordinate with IT, SOC analysts, and vendors to implement security enhancements.
• Assist in ISO 27001, NIST CSF, and CIS Controls alignment.
• Maintain endpoint security documentation and runbooks.
• Support audits with evidence and configuration details.

Skills

SOC Operations

Incident Response

Vulnerability Management

SIEM Integration

Log Analysis

Endpoint Security Management

Security Compliance Reporting

Remote Support

Windows Server Administration

Security Automation

Cloud Security

Tools

CrowdStrike Falcon EDR/XDR Administration

Sophos Central Administration

ManageEngine Endpoint Central/UEM

SIEM platforms

Job description

Job Summary

Endpoint Security, SOC Security Operations. Role Summary: Will be responsible for managing enterprise endpoint security solutions, SOC operations, vulnerability management, security monitoring, compliance reporting, and end-user security support. The role involves administration of CrowdStrike, Sophos, ManageEngine solutions, SIEM integrations, incident response, and ensuring adherence to organizational security policies and compliance requirements.

Key Responsibilities

• Administration and management of enterprise Endpoint Security solutions including CrowdStrike Falcon and Sophos Central, ensuring endpoint protection, policy enforcement, threat prevention, and security compliance.
• Manage the complete lifecycle of CrowdStrike Falcon, including sensor deployment, policy configuration, Real-Time Response (RTR), Host Isolation, Detection Response, IOC investigation, Custom IOA management, Falcon Fusion workflows, Identity Protection, and endpoint health monitoring.
• Perform Sophos Endpoint Administration, including policy creation, device encryption, web control, application control, peripheral/device control, tamper protection, antivirus management, and threat remediation.
• Integration of endpoint security platforms with SIEM solutions for centralized log collection, security event correlation, incident monitoring, and threat visibility.
• Manage daily Security Operations (SOC) activities, including monitoring security alerts, incident triage, investigation, containment, remediation, and closure of security incidents within defined SLAs.
• Handle security tickets through ITSM platforms, ensuring timely investigation, user communication, documentation, and resolution.
• Administration of ManageEngine Endpoint Central (Desktop Central) for endpoint management, software deployment, asset inventory, remote troubleshooting, configuration management, compliance monitoring, and patch deployment.
• Plan, deploy, and monitor enterprise-wide Patch Management activities for Windows, Linux and MAC operating systems and third-party applications to maintain security compliance.
• Manage BitLocker Drive Encryption, including deployment, recovery key management, encryption compliance monitoring, policy enforcement, and troubleshooting.
• Perform enterprise Vulnerability Management, including vulnerability assessment, risk analysis, remediation coordination, validation, compliance reporting, and closure tracking.
• Manage enterprise Data Loss Prevention (DLP) policies to prevent unauthorized data movement through USB devices, removable media, printing, clipboard, email, and file transfer channels.
• Generate and present Daily, Weekly, and Monthly Security Compliance Reports, including Antivirus Compliance, Encryption Compliance, Vulnerability Compliance, Patch Compliance, Endpoint Health, Security Incident Metrics, and Executive Dashboards for management review.
• Provide L1/L2 Remote Technical Support for endpoint security incidents, malware infections, encryption issues, policy conflicts, application whitelisting, endpoint performance, and security-related user issues.
• Coordinate with internal IT teams, Infrastructure teams, SOC analysts, and external vendors to resolve complex security incidents and implement security enhancements.
• Assist in implementing security best practices aligned with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and organizational information security policies.
• Maintain endpoint security documentation, SOPs, security runbooks, knowledge base articles, audit evidence, and operational reports.
• Supported internal and external audits by providing endpoint security evidence, compliance reports, configuration details, and security documentation.

Experience

• 6-8 Years of IT Infrastructure / Cyber Security Experience
• Minimum 3+ Years of Hands-on Experience in Endpoint Security SOC Operations

Required Skills

• CrowdStrike Falcon EDR/XDR Administration
• Sophos Central Administration
• SOC Operations
• Incident Response
• Vulnerability Management
• SIEM Integration
• Log Analysis
• ManageEngine Endpoint Central/UEM
• BitLocker Administration
• Patch Management
• Device Control
• Application Control
• Data Loss Prevention (DLP)
• Endpoint Security Management
• Security Compliance Reporting
• Remote Support Operations
• Windows Server Administration
• API Integration
• Security Automation

Key Skills

• Cloud Security
• Cyber Security