Sr. Engineer I - Cybersecurity

NewSpace Research and Technologies; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

NewSpace Research and Technologies is seeking an experienced security engineer to secure and manage on-premise infrastructure across servers, firewalls, and internal services. You will design secure access controls, harden Linux/Windows systems, and deploy SIEM/EDR tools such as Wazuh/OSSEC, while monitoring logs, detecting anomalies, and securing APIs with development teams.

The role includes vulnerability testing and secrets management review.

Responsibilities

• Secure and manage on-premise infrastructure (servers, firewalls, internal services)
• Configure and monitor firewalls, VPNs, and network segmentation
• Design secure access controls for internal tools (Git, project management, storage, etc.)
• Harden Linux/Windows systems and enforce baseline configurations
• Deploy and manage SIEM / EDR solutions (e.g., Wazuh, OSSEC, etc.)
• Monitor logs, detect anomalies, and respond to incidents
• Reduce noise and improve signal quality in alerts (tuning rules, filtering)
• Work with dev teams to secure APIs and external endpoints
• Conduct vulnerability assessments and basic penetration testing
• Review authentication, authorization, and secrets management practices
• Manage endpoint security (laptops, workstations)
• Implement device control, patching, and MDM (if applicable)
• Strengthen identity systems (SSO, MFA, role-based access)
• Investigate security events and lead response actions
• Build incident response playbooks
• Perform root cause analysis and recommend fixes
• Implement security practices aligned with defense sector expectations
• Maintain documentation for audits and internal processes
• Balance security with usability in a fast-moving startup

Job description

• Secure and manage on-premise infrastructure (servers, firewalls, internal services)
• Configure and monitor firewalls, VPNs, and network segmentation
• Design secure access controls for internal tools (Git, project management, storage, etc.)
• Harden Linux/Windows systems and enforce baseline configurations
• Deploy and manage SIEM / EDR solutions (e.g., Wazuh, OSSEC, etc.)
• Monitor logs, detect anomalies, and respond to incidents
• Reduce noise and improve signal quality in alerts (tuning rules, filtering)
• Work with dev teams to secure APIs and external endpoints
• Conduct vulnerability assessments and basic penetration testing
• Review authentication, authorization, and secrets management practices

Endpoint & Identity Security

• Manage endpoint security (laptops, workstations)
• Implement device control, patching, and MDM (if applicable)
• Strengthen identity systems (SSO, MFA, role-based access)
• Investigate security events and lead response actions
• Build incident response playbooks
• Perform root cause analysis and recommend fixes

Compliance & Best Practices

• Implement security practices aligned with defense sector expectations
• Maintain documentation for audits and internal processes
• Balance security with usability in a fast-moving startup