Security Operations Engineer

About the role

The Security Operations Engineer will join a 24x7 security team to support and enhance the client’s security infrastructure. The role covers L1, L2 and L3/L4 activities, ensuring continuous protection, rapid incident response, and compliance with governance standards.

Key responsibilities

• Implement and troubleshoot firewall policies and ACLs.
• Manage WAF, IPS and Guardium solutions.
• Administer VPN, MFA and token services.
• Perform website and proxy whitelisting and block indicators of compromise.
• Administer endpoint security tools (AV, EDR, DLP).
• Monitor security mailboxes and queues.
• Handle configuration management for security technologies.
• Prepare audit, compliance and evidence documentation.
• Participate in disaster‑recovery drills and provide DR support.
• Conduct impact analysis, root‑cause analysis and create SOPs.
• Review firewall rules, support device hardening and coordinate vulnerability remediation.
• Follow ITSM processes (Incident, Change, Problem) and meet SLA targets.
• Produce accurate MIS reports on ticket volumes, BAU metrics, preventive maintenance and risk tracking.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Proven experience in L1‑L3 security operations within a 24x7 environment.
• Strong knowledge of security governance, compliance and ITSM frameworks.
• Ability to work shift‑based schedules and provide back‑fill coverage.

Required skills

• Firewall policy and ACL management
• WAF, IPS, Guardium
• VPN, MFA, token administration
• Website and proxy whitelisting
• IoC blocking
• Antivirus, EDR, DLP solutions
• Security mailbox monitoring
• Configuration management
• Audit and compliance evidence preparation
• Disaster‑recovery support
• Root‑cause analysis and SOP development
• Device hardening and vulnerability remediation
• ITSM processes (Incident, Change, Problem)
• MIS reporting