Security Operations Engineer

About the role

We are looking for Security Operations Engineers to join a 24x7 team that supports the client’s security infrastructure. The role covers L1, L2 and senior L3/L4 responsibilities, ensuring continuous monitoring, incident response and preventive maintenance of security platforms.

Key responsibilities

• Provide 24x7 L1 triage, ticket handling, basic troubleshooting and log monitoring.
• Perform L2 advanced troubleshooting, complex changes, root‑cause analysis and audit evidence preparation.
• Deliver L3/L4 engineering tasks such as security architecture support, policy design, hardening, disaster‑recovery assistance and governance input.
• Implement and troubleshoot firewall policies, ACLs, WAF/IPS/Guardium, VPN, MFA and token solutions.
• Manage website and proxy whitelisting, block indicators of compromise and administer endpoint security tools (AV, EDR, DLP).
• Maintain configuration management, device baseline hardening and vulnerability remediation coordination.
• Produce accurate MIS reports on ticket volumes, BAU metrics, preventive maintenance status and operational trends.
• Support audit, compliance and regulatory evidence collection and participate in DR drills.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related discipline.
• Relevant experience in security operations at L1‑L4 levels.
• Ability to work shift‑based schedules and provide on‑call support.
• Familiarity with ITSM processes (Incident, Change, Problem) and strict adherence to governance and compliance standards.

Required skills

• Firewall policy and ACL management
• WAF, IPS, Guardium administration
• VPN, MFA and token management
• Website and proxy whitelisting
• IoC blocking
• Endpoint security tools (Antivirus, EDR, DLP)
• Configuration and change management
• Audit and compliance evidence preparation
• Disaster‑recovery support
• Root‑cause analysis
• ITSM (Incident, Change, Problem) processes
• MIS reporting and log monitoring
• Device hardening and vulnerability remediation