Lead Security Engineering (System Security)_97596

Key Skills: Endpoint Security, EDR, Security, SCCM, Sentinel, Configuration

Roles and Responsibilities:

• System & Endpoint Security Platform Ownership: Own and lead enterprise system and endpoint security platforms including SCCM / Endpoint Configuration Manager, SentinelOne, and Microsoft EOP. Define architecture standards, deployment models, and configuration baselines for system and endpoint security controls. Ensure high availability, scalability, and operational health of system security services across the enterprise.
• Endpoint Protection & Agent Engineering (SentinelOne): Lead deployment, configuration, and lifecycle management of SentinelOne EDR agents. Ensure endpoint coverage, policy compliance, threat prevention effectiveness, and performance optimization. Partner with SOC teams to support alert tuning, threat investigation, and response workflows. Drive endpoint hygiene initiatives and continuous improvement of endpoint security posture.
• System Management & Secure Deployment (SCCM): Lead SCCM-based deployment of security agents, system hardening configurations, and endpoint controls. Engineer scalable, automated deployment workflows for Windows and supported platforms. Ensure reliable patching, upgrade, and rollback strategies for security agents and system components. Support endpoint inventory, health monitoring, and compliance reporting.
• Email & Messaging Security (Microsoft EOP): Own configuration and optimization of Microsoft Exchange Online Protection (EOP). Tune anti-phishing, anti-malware, and spam protection policies to reduce email-borne threats. Support secure email workflows and incident response for phishing and email-based attacks. Partner with GRC and Compliance teams to ensure email security controls meet regulatory requirements.
• Incident Support, Compliance & Governance: Provide L3 support for system and endpoint security incidents and escalations. Ensure alignment of system security controls with regulatory and compliance frameworks (HIPAA, NIST, ISO). Support audits, risk assessments, and security architecture reviews with technical inputs. Maintain standards, runbooks, and operational documentation.
• Leadership & Continuous Improvement: Provide technical leadership and mentorship to system and endpoint security engineers. Act as an escalation point for complex system security issues. Drive automation, process optimization, and platform maturity initiatives. Identify opportunities to improve security coverage, performance, and user experience.

Skills Required:

• Strong expertise in Endpoint Security and EDR solutions (SentinelOne preferred)
• Hands-on experience with SCCM / Microsoft Endpoint Configuration Manager
• In-depth knowledge of enterprise security architecture and system security controls
• Experience with Microsoft Sentinel / SIEM tools for monitoring and threat detection
• Strong understanding of email security solutions (Microsoft Exchange Online Protection - EOP)
• Expertise in security agent deployment, configuration, and lifecycle management
• Knowledge of threat detection, incident response, and endpoint protection strategies
• Experience in system hardening, patch management, and vulnerability management
• Familiarity with Windows OS security, endpoint compliance, and configuration baselines
• Understanding of security frameworks and compliance standards (NIST, ISO 27001, HIPAA)
• Experience with automation and scripting (PowerShell preferred)
• Knowledge of security monitoring, logging, and alert tuning
• Experience in production support, L3 escalation handling, and incident management
• Familiarity with ITSM tools and change management processes
• Strong understanding of network security fundamentals

Education: Any Graduation, Any Post Graduation

Note: This role is open for both Hyderabad and Bangalore locations. Candidates currently based in Bangalore who are open to relocating to Hyderabad are also encouraged to apply.