Security Operations Engineer (L1/L2/L3)

About the role

The Security Operations Engineer will join a 24x7 security team to provide L1, L2 and L3/L4 support for the client’s security infrastructure. The role ensures continuous protection of networks, applications and endpoints while delivering timely BAU tasks and proactive maintenance.

Key responsibilities

• Provide 24x7 operational coverage, including shift‑based and on‑call support.
• Implement and troubleshoot firewall policies, ACLs, WAF, IPS and Guardium rules.
• Manage VPN, MFA, token administration and website/proxy whitelisting.
• Block indicators of compromise and administer endpoint security tools (AV, EDR, DLP).
• Perform configuration management, device hardening and vulnerability remediation.
• Support audit, compliance and evidence preparation, and participate in disaster‑recovery drills.
• Generate accurate MIS reports on ticket volumes, BAU metrics, preventive maintenance status and operational trends.
• Adhere to ITSM processes (Incident, Change, Problem) and client governance.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Experience in security operations, preferably with exposure to L1‑L3 support levels.
• Ability to work in a shift‑based, 24x7 environment and provide back‑fill coverage.

Required skills

• Firewall policy and ACL implementation
• WAF, IPS and Guardium management
• VPN, MFA and token administration
• Website and proxy whitelisting
• IoC blocking
• Endpoint security tools (Antivirus, EDR, DLP)
• Configuration management
• Device hardening and vulnerability remediation
• Audit and compliance evidence preparation
• Disaster‑recovery support
• ITSM processes (Incident, Change, Problem)