System Administrator - Cyber Security

Sapiens; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Sapiens International is seeking a Security Specialist to join our global IT Security Operations. The role is hands-on and incident-driven, focusing on reviewing and resolving security tickets raised by users and teams across the business.

You will serve as the first response for tickets across tools like EDR, DLP, email protection, DNS security, CSPM, and other platforms, investigate root causes, and drive resolution while coordinating with IT and other teams in a rotating shift model.

Qualifications

• 3+ years of experience in information security operations or a security service desk.
• Hands-on experience handling security tickets or incidents across multiple security tools.
• Exposure to at least four of the listed security platforms.
• Fluent English communication.

Responsibilities

• Review, investigate, and resolve security incidents and tickets.
• Coordinate with end users and IT teams to drive tickets to closure within SLA.
• Support security tool administration and participate in security projects.
• Escalate complex incidents to senior team members as needed.

Skills

Fluent English

Team player

Ownership mindset

Tools

EDR

DLP

Email protection

DNS security

CSPM

Exposure Management

External Attack Surface Management

Identity Protection

Purview

Job description

Security Specialist

IT – Information Security Operations | Information Security Specialist | Full-Time | India | Rotational Shift

Sapiens International

Security Specialist

IT – Information Security Operations | Information Security Specialist | Full-Time | India | Rotational Shift

About The Role

Sapiens International is looking for a Security Specialist (Information Security Specialist) to join our global IT Security team. This is a hands‑on, incident-driven role responsible for reviewing and resolving security tickets raised by users and teams across the business.

You will be the first point of response for security tickets raised across our security tools — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, Purview, and other platforms in our stack. You will review each ticket, investigate the cause, and work it through to resolution, escalating where needed. Alongside ticket handling, you will also support security tool administration and take up tasks assigned by your manager.

Work Schedule

• This is a rotational shift role. Shifts rotate every two weeks across three windows: Morning 9:00 AM – 6:00 PM, Afternoon 1:00 PM – 10:00 PM, and Evening 6:00 PM – 3:00 AM.

Key Responsibilities

Incident & Ticket Management

• Review, investigate, and resolve security incidents and tickets raised by users and teams across various security tools
• Handle tickets spanning multiple security platforms, working across a minimum of four of: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Diagnose the root cause of each reported issue and take the appropriate action to fix it, whether it's a policy change, configuration update, or coordination with another team
• Coordinate with end users, IT, and other teams to gather information and drive tickets to closure within SLA
• Escalate complex or high‑severity incidents to senior team members or the manager as needed

Security Tools & Task Support

• Support day‑to‑day administration and configuration of security tools such as EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Work on security tasks, tool improvements, and projects assigned by the manager

Requirements

Experience

• 3+ years of experience in information security operations, a security operations center, or a security service‑desk role
• Hands‑on experience handling security tickets or incidents across multiple security tools
• Demonstrated exposure to at least four of the following: EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview

Technical — Must Have

• Working knowledge of common security tools and the issues they generate — EDR, DLP, email protection, DNS security, CSPM, Exposure Management, External Attack Surface Management, Identity Protection, and Purview
• Understanding of ticket‑based troubleshooting — reading alerts, checking logs/policies, and identifying root cause
• Ability to work independently to research and resolve tickets using vendor documentation and internal knowledge bases

Soft Skills & Language

• Fluent verbal English
• Willing and flexible to work a rotational shift model (morning/afternoon/evening, rotating every two weeks)
• Able to multi‑task, prioritize, and stay organized under ticket volume
• Team player with a proactive, ownership mindset

Advantage (Not Required)

• Prior hands‑on exposure to any of: CSPM, Exposure Management, External Attack Surface Management, Identity Protection, or Purview
• Exposure to ITSM/ticketing tools (ServiceNow)
• Security‑related certifications: CompTIA Security+, CEH, or vendor‑specific (Microsoft, CrowdStrike, etc.)