L2 Operations Lead – Malware Tools at NeoGenCode Technologies Pvt Ltd · Gurugram · 10 - 15 years · ₹10L - ₹18L / yr · Raised funding · Posted 23 Oct 2026

Job Title : L2 Operations Lead – Malware Tools
Experience : 10+ Years
Location : Gurugram
Work Mode : Hybrid – 2 Days in Office
Employment Type : Full-Time
Engagement Duration : 6+ Months
Number of Positions : 1
Support Level : L2 Operations
Domain : Endpoint Security & Malware Protection
About the Role :
We are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.
The role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.
Mandatory Skills :
CrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.
Key Responsibilities :
- Manage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.
- Monitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.
- Administer and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.
- Investigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.
- Troubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.
- Install, configure, update, and maintain antivirus and endpoint protection solutions across servers.
- Manage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.
- Escalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.
- Maintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.
- Participate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.
- Develop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.
- Analyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.
- Collaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.
- Ensure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).
- Provide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.
Required Technical Skills :
- Endpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.
- CrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.
- Microsoft Defender : Knowledge of endpoint protection and malware detection capabilities.
- Malware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.
- ITSM : Experience with incident, problem, and change management processes.
- Security Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.
- Operating Systems : Strong knowledge of Windows operating systems and endpoint security administration.
- Scripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.
- Monitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.
Tools & Technologies :
- CrowdStrike Falcon
- Microsoft Defender
- ServiceNow
- Splunk SIEM
- SOAR Platforms
- DataDog
- Antivirus and Endpoint Detection & Response (EDR) Solutions
- Windows Server and Windows Operating Systems
- Python / PowerShell
Required Experience & Qualifications :
- 10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.
- Proven experience supporting endpoint protection and malware security tools in an enterprise environment.
- Hands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.
- Experience troubleshooting endpoint security agents and resolving security incidents.
- Strong understanding of malware investigation, alert triage, threat containment, and escalation procedures.
- Experience working in a 24×7 operational support environment.
- Good understanding of ITSM processes, including incident, problem, and change management.
- Experience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal English communication skills.
- Ability to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.
Preferred Certifications :
- CrowdStrike Falcon Administrator
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- CompTIA Security+
Key Performance Expectations :
- Timely resolution of L2 incidents within defined SLAs.
- Effective investigation and containment of malware and endpoint security threats.
- Reduced recurrence of incidents through RCA and preventive actions.
- Accurate incident documentation and timely escalations.
- Improved endpoint agent health, security coverage, and operational efficiency.
- Compliance with client security standards and operational procedures.
Ideal Candidate Profile :
The ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.

About NeoGenCode Technologies Pvt Ltd
About
Welcome to Neogencode Technologies, an IT services and consulting firm that provides innovative solutions to help businesses achieve their goals. Our team of experienced professionals is committed to providing tailored services to meet the specific needs of each client. Our comprehensive range of services includes software development, web design and development, mobile app development, cloud computing, cybersecurity, digital marketing, and skilled resource acquisition. We specialize in helping our clients find the right skilled resources to meet their unique business needs. At Neogencode Technologies, we prioritize communication and collaboration with our clients, striving to understand their unique challenges and provide customized solutions that exceed their expectations. We value long-term partnerships with our clients and are committed to delivering exceptional service at every stage of the engagement. Whether you are a small business looking to improve your processes or a large enterprise seeking to stay ahead of the competition, Neogencode Technologies has the expertise and experience to help you succeed. Contact us today to learn more about how we can support your business growth and provide skilled resources to meet your business needs.
Candid answers by the company
IT & Engineering Talent Staffing
- Provides full-time and contract-based hiring, delivering handpicked, pre‑screened developers across tech stacks—ranging from web, mobile, AI/ML, Web3/blockchain.
- Maintains a bench o vetted candidates, offering fast delivery of interview-ready profiles—often within 24 hours.
- Offers payroll management, handling compliance, tax, attendance, and documentation for both contractors and full-time employees.
2. End-to-End Project Delivery
- Delivers full-stack development solutions: web, mobile, cloud, AI/ML, Blockchain/Web3.
- Manages entire project lifecycle—requirements gathering, design (UI/UX), development, deployment, and ongoing support .
3. Additional Offerings
- Expands into cybersecurity consulting, digital marketing, and cloud platform services (like AWS, GCP, Azure) .
- Provides strategic IT consulting to align technology solutions with business objectives
Similar jobs (10)
About Solutionara
Solutionara is a U.S.-headquartered IT Consulting & Technology Services firm with a rapidly growing Global Delivery Center in Noida, India. We specialize in enterprise integration, data platforms, cloud engineering, and digital experience technologies. Our clients trust us to modernize their technology landscape, streamline operations, and build data-driven digital products.
At Solutionara, we operate with a builder mindset — high ownership, hands-on problem solving, and a culture where innovation is not a slogan but a standard. If you want to grow in an environment where your work contributes to real enterprise systems and digital platforms, you will thrive here.
Location: Noida, India (On-site – Global Delivery Center, Sector 62)
Experience: 6 – 10 years
Employment Type: Full-time
Role Summary
The IT Systems & Endpoint Lead will be responsible for managing and overseeing Solutionara's endpoint environment, user access, and core IT systems across cloud and on-premise infrastructure. This role combines hands-on system administration with operational ownership, ensuring endpoint compliance, identity governance, and reliable IT operations across the organization. The ideal candidate will act as a key operational anchor, driving stability, enforcing IT policies, and supporting a secure and scalable environment.
Key Responsibilities
Endpoint & Identity Ownership
- Own user identity and access management across Microsoft Entra ID and hybrid Active Directory
- Manage and enforce endpoint compliance using Microsoft Intune
- Ensure consistent enforcement of MFA, Conditional Access, and device policies
- Maintain role-based access control (RBAC) and support periodic access reviews
Infrastructure & Systems Management
- Oversee Windows Server environments and core infrastructure services
- Administer Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive)
- Drive patch management, system health monitoring, and uptime reliability
- Identify and implement automation opportunities using PowerShell
IT Operations & Support Oversight
- Handle complex L2/L3 issues and provide escalation support
- Guide junior IT staff or vendors for L1/L2 support activities
- Oversee device provisioning, onboarding, and lifecycle management
- Ensure accurate asset tracking and IT documentation
Security & Compliance Execution
- Ensure enforcement of endpoint security policies (Defender, BitLocker, compliance baselines)
- Support Conditional Access, identity security, and policy enforcement
- Participate in audit readiness, compliance checks, and documentation
- Monitor risks and escalate security gaps proactively
Network & Access Coordination
- Oversee LAN, VPN, and Wi-Fi operations in coordination with network partners
- Maintain access control records, VLANs, and network documentation
- Troubleshoot and resolve advanced connectivity issues
Qualifications & Skills
Education & Experience
- Bachelor's degree in Computer Science, IT, or related field
- 6–10 years of experience in IT infrastructure, endpoint management, or system administration
Core Technical Skills
- Strong hands-on experience with Microsoft Entra ID, Intune, Windows Server, and Microsoft 365
- Experience managing endpoint compliance and identity access
- Solid understanding of Conditional Access, MFA, and access governance
- Good knowledge of networking fundamentals (LAN, VPN, firewall basics)
- Experience with ITSM tools (JIRA, ServiceNow)
- PowerShell scripting for automation and reporting
Preferred Skills
- Exposure to Microsoft Defender (Endpoint / O365)
- Understanding of basic security best practices and audit requirements
- Experience supporting compliance or audit activities
Certifications (Preferred)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Modern Desktop Administrator (MD-102)
- CompTIA Security+ / Network+
- ITIL Foundation
Soft Skills
- Strong ownership and accountability mindset
- Good communication and stakeholder coordination skills
- Ability to mentor junior team members
- Structured problem-solving and decision-making ability
- Ability to operate in a fast-paced, evolving environment
📢 We're Hiring | Cybersecurity Consultant | Gurugram
Role: Cybersecurity Consultant
Experience: 7+ Years
Location: Gurugram, Haryana
We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.
🔹 Key Responsibilities
- Manage and strengthen security controls across enterprise IT infrastructure.
- Perform vulnerability assessments, remediation tracking and patch management.
- Monitor security alerts, investigate incidents and support threat hunting.
- Implement and manage SIEM, EDR and endpoint security solutions.
- Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
- Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
- Assist with backup, recovery, disaster recovery and business continuity activities.
- Maintain security documentation, remediation evidence and audit compliance.
🔹 Required Skills
- 7+ years of relevant experience in cybersecurity, security engineering or security operations.
- Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
- Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
- Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
- Strong understanding of incident response, threat hunting, network security and security remediation.
- Experience with EDR, IAM and enterprise security controls.
⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.
📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com
IT Systems Engineer
Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure
Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership
Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at
scale.
The Mission
About Metadome.ai
Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the
Metaverse Standards Forum and the VR/AR Association.
About the Role
We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.
This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.
Core Responsibilities
● Identity & Access Management — JumpCloud:
○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.
○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.
○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.
○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.
○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.
● Google Workspace Administration — GWS:
○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.
○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,
and sharing / visibility policies.○
○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.
Endpoint & Threat Protection — Sophos:
○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and
servers.
○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.
○ Maintain endpoint encryption, web / application control, and device-hardening standards.
○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.
Network, Firewall & Wi-Fi:
○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.
○ Administer enterprise Wi-Fi and wired networks (switches, access points), including
RADIUS-backed authentication.
○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.
○ Implement network monitoring, intrusion detection, and centralized logging.
Hardware, Software & Asset Management:
○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and
decommissioning.
○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.
○ Maintain an accurate hardware and software inventory and asset register.
○ Manage software deployment, patch management, and license compliance.
Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:
○ Operate and continuously improve the company's Information Security Management System
(ISMS).
○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control
implementation, evidence collection, and continuous monitoring.
○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA
assessments.
○ Serve as a primary point of contact during external audits and customer security reviews.
○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response
runbooks.
○ Drive security-awareness and phishing-simulation programs across the organization.
IT Operations & Support:
○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.
○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.
○ Manage backups, disaster recovery, and business-continuity testing.
○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within
budget.
○ Maintain documentation, runbooks, and standard operating procedures.
○ Own and report on the IT budget and asset allocation.
Required Skills & Experience
● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems
below rather than purely supervisory exposure.
● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.
● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.
● Sophos — hands-on endpoint / XDR administration and threat response.
● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.
● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one
full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.
Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.
System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.
Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.
Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.
Preferred Qualifications
●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.
●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.
●Scripting and automation for IT operations (Bash, PowerShell, or Python).
●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.
●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.
Why Join Us
You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running
flawlessly.
Position: Technical Lead – Forcepoint (Data & Cloud Security)
Company: Inflow Technologies
Location: Bangalore
Work Mode: Work From Office | 5 days/week
Experience Required: Minimum 6 years
Interview Process: 2 rounds (Virtual + Final Face-to-Face)
About Inflow Technologies
Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.
Position Overview
Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.
Core Products
- Forcepoint DLP (Endpoint, Network, Web, Email)
- Forcepoint Web Security
- Forcepoint Email Security
- Forcepoint CASB
- Forcepoint Suite / Forcepoint One
- Forcepoint Cloud Security / SSE (incl. ZTNA)
- Forcepoint DSPM
Key Responsibilities
1. Solution Design & Architecture
- Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
- Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
- Implement EDM/IDM/OCR and data classification policies
2. Web Security (SWG)
- Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
- Configure transparent/explicit proxy, SSL inspection, URL filtering
3. Email Security
- Configure SMTP routing, DLP email policies, encryption & compliance rules
4. Advanced Policy Configuration
- Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules
5. L3 Troubleshooting & RCA (Critical)
- Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
- Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix
Qualifications & Certifications (Preferred)
- Bachelor's degree (IT/CS or related)
- Forcepoint Certified Administrator (FCA)
- Forcepoint DLP Specialist
- CCNA / Security+ (nice-to-have)
Job Summary
We are looking for an experienced IT Support Engineer to manage IT infrastructure, provide technical support, troubleshoot hardware and software issues, and ensure smooth day-to-day IT operations.
The ideal candidate should have strong networking and troubleshooting skills, along with hands-on experience in Fortinet/FortiGate, CCNA-level networking, Windows Server, and CrowdStrike.
Key Responsibilities :
Provide day-to-day IT support and troubleshoot hardware, software, and network-related issues.
Configure, manage, and troubleshoot Fortinet/FortiGate firewalls.
Handle network administration, including LAN, WAN, connectivity, and network security.
Manage and support Windows Server environments.
Monitor and manage endpoint security using CrowdStrike.
Diagnose and resolve technical issues promptly to minimize downtime.
Maintain IT infrastructure, system configurations, and technical documentation.
Ensure system security, network reliability, and smooth IT operations.
Required Skills :
Strong experience in IT Support and IT infrastructure management.
Hands-on knowledge of Fortinet/FortiGate and/or CCNA-level networking.
Working knowledge of Windows Server administration.
Experience with CrowdStrike endpoint security.
Excellent troubleshooting, networking, and problem-solving skills.
Good communication and coordination skills.
- Job Summary
- We are looking for an experienced L2 Production Support Engineer to manage production incidents, monitor application and infrastructure health, and ensure high availability of business-critical services. The candidate will be responsible for event management, incident triage, root cause analysis, alert monitoring, and coordination with L1, L3, DevOps, infrastructure, and application teams through a Mission Control environment.
- The ideal candidate should have hands-on experience with ServiceNow, Splunk, AppDynamics, ThousandEyes, and production monitoring tools.
- Key Responsibilities
- Monitor production applications, infrastructure, and business services using monitoring and observability tools.
- Perform L2 production support activities, including incident investigation, troubleshooting, and resolution.
- Manage real-time alerts, events, and incidents through the Event Management / Mission Control function.
- Monitor application logs, system performance, availability, and transaction failures using Splunk, AppDynamics, and ThousandEyes.
- Analyze alerts and correlate events to identify potential service disruptions and reduce alert noise.
- Create, update, assign, and track incidents, problems, and change requests in ServiceNow.
- Perform initial impact assessment, incident prioritization, and escalation based on severity and SLA requirements.
- Troubleshoot application errors, service outages, connectivity issues, performance degradation, and recurring incidents.
- Collaborate with L1 support, L3 engineering, application development, database, network, middleware, and infrastructure teams.
- Perform root cause analysis (RCA) and contribute to problem management and preventive action plans.
- Support major incident management, bridge calls, stakeholder communication, and service restoration activities.
- Maintain incident documentation, troubleshooting procedures, operational runbooks, and knowledge articles.
- Identify recurring alerts and incidents and recommend automation or monitoring improvements.
- Participate in shift rotations, weekend support, and 24/7 operations, as required.
- Ensure compliance with operational procedures, SLAs, OLAs, and ITIL best practices.
- Required Technical Skills
- 1. L2 Production Support
- Hands-on experience in application or infrastructure production support.
- Incident triage, troubleshooting, service restoration, and escalation management.
- Knowledge of application logs, system health checks, and performance monitoring.
- Experience supporting business-critical production environments.
- 2. Event Management / Mission Control
- Experience with real-time event monitoring and alert management.
- Ability to correlate events, identify service-impacting alerts, and prioritize incidents.
- Knowledge of event-to-incident workflows and major incident escalation procedures.
- Experience working in a centralized IT operations or Mission Control environment.
- 3. ServiceNow
- Experience with ServiceNow Incident Management, Problem Management, and Change Management.
- Ability to create, update, assign, and resolve incidents while maintaining accurate ticket documentation.
- Understanding of incident priority, severity, SLA tracking, and escalation workflows.
- Exposure to ServiceNow ITOM / Event Management is an advantage.
- 4. Monitoring and Observability Tools
- Splunk: Log analysis, searching, filtering, troubleshooting, and identifying application errors.
- AppDynamics: Application performance monitoring, transaction tracing, response-time analysis, and identifying bottlenecks.
- ThousandEyes: Network and application connectivity monitoring, path visualization, latency analysis, packet loss, and availability troubleshooting.
- 5. Additional Technical Knowledge
- Basic understanding of Linux/Unix and Windows operating systems.
- Knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, latency, and connectivity troubleshooting.
- Basic SQL knowledge for data validation and troubleshooting.
- Understanding of REST APIs, web applications, middleware, and distributed application environments is preferred.
- Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
- 3–7 years of experience in IT production support, application support, or IT operations.
- Hands-on experience with ServiceNow and at least one major monitoring or observability tool.
- Strong analytical, troubleshooting, communication, and incident management skills.
- Familiarity with ITIL processes and SLA-driven support environments.
- Ability to work under pressure and handle multiple production incidents simultaneously.
- Preferred Qualifications
- ITIL Foundation certification.
- Experience with ServiceNow ITOM / Event Management.
- Exposure to major incident management and root cause analysis.
- Experience in enterprise, banking, telecom, retail, or other high-availability environments.
- Knowledge of automation and scripting using Shell, Python, or PowerShell.
- Key Performance Indicators (KPIs)
- Incident response and resolution time.
- SLA compliance.
- Mean Time to Acknowledge (MTTA) and Mean Time to Resolve (MTTR).
- Production service availability and monitoring effectiveness.
- Reduction in recurring incidents and false-positive alerts.
- Quality of incident documentation and root cause analysis.
- Ideal Candidate Profile
- The ideal candidate is a technically strong L2 Production Support Engineer with hands-on experience in incident and event management, ServiceNow ticketing, production monitoring, and application/network troubleshooting. The candidate should be capable of quickly identifying service-impacting issues, coordinating with resolver teams, and restoring services while maintaining SLA commitments and operational stability.
- Key skills for the role
- L2 Production Support
- Event Management / Mission Control
- ServiceNow ITSM / ITOM
- Production Monitoring and Alert Management
- Splunk
- AppDynamics
- ThousandEyes
- Incident, Problem and Major Incident Management
- Root Cause Analysis (RCA)
- ITIL and SLA Management
At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.
Learn more at www.shipthis.co
Role Overview
We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.
What You’ll be Doing
Security Operations
- Monitor infrastructure, application, and security alerts and assist with incident investigation.
- Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
- Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
- Track security issues and corrective actions through closure.
Vulnerability Management
- Run and review application and infrastructure vulnerability scans.
- Maintain a vulnerability register and coordinate remediation with engineering teams.
- Support VAPT and penetration-testing exercises and validate closure of findings.
- Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.
Compliance & Governance
- Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
- Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
- Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
- Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.
MDM & Endpoint Security
- Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
- Maintain device inventory and monitor endpoint compliance.
- Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
- Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
- Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.
DevOps, CI/CD & Cloud
- Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
- Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
- Automate repetitive deployment, infrastructure, security, and compliance tasks.
- Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
- Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.
Required Fundamentals
- Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
- Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
- Strong troubleshooting, ownership, attention to detail, and willingness to learn.
Desired Qualifications
- 1–2 years of experience with strong fundamentals are welcome.
- Basic scripting knowledge in Python, Bash, or similar.
- Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
- Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.
We Welcome Candidates:
- Who can join immediately
- Female candidates returning to work after a career break are strongly encouraged.
We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.
Job Synopsys
Location: Bangalore
Job Type: Full-time, Permanent
Experience: 1-2 years
Industry: Software Product
Experience: 3–4 Years
Location: Hyderabad
Job Responsibilities:
- Provide L2 production support and troubleshoot application or infrastructure issues.
- Monitor alerts and incidents using Splunk, AppDynamics, or ThousandEyes.
- Perform event management, incident analysis, and root cause identification.
- Manage incidents, service requests, and escalations through ServiceNow.
- Coordinate with L1, L3, and relevant teams to ensure timely issue resolution.
- Monitor system performance and maintain service availability.
Required Skills:
- Hands-on experience in L2 Production Support.
- Knowledge of Event Management and Incident Management.
- Experience with ServiceNow.
- Working knowledge of Splunk, AppDynamics, or ThousandEyes.
- Strong troubleshooting, analytical, and communication skills.
Desktop Engineer - Hardware and Software Suppor_Savex
Responsibilities
- Hardware Diagnosis & Repair: Break down, diagnose, and physically repair enterprise laptops and desktops. This includes replacing laptop screens, keyboards, batteries, motherboards, fans, desktop power supplies, RAM, and storage drives.
- Desktop & Software Support: Install, configure, and troubleshoot Windows operating systems, standard business applications (Microsoft 365, Mircosoft Outlook, VPNs), and specialized department software.
- Hardware Lifecycle Management: Manage the complete hardware lifecycle from provisioning and deployment to tear down and secure e-waste disposal.
- Endpoint Administration:. Day to day administration endpoints like Crowdstrike, Netskope, Sapphire on Laptops & Desktops.
- Vendor Management: Handle warranty claims, repairs fall under active warranties.
- Network & Peripheral Troubleshooting: Resolve end-user connectivity issues (Wi-Fi, LAN, VPN) and support peripheral hardware including docks, multi-monitor setups, local/network printers, and conference room AV equipment.
- Asset Tracking: Maintain an accurate, real-time inventory of all physical IT assets, spare parts, and software licenses.
Skills Needed
- Experience: 5+ years in IT support, systems administration, or a similar role with a heavy emphasis on hands-on hardware maintenance.
- Hardware Proficiency: Proven ability to safely disassemble and reassemble modern ultra-thin laptops and micro-desktops without causing physical damage.
- OS Expertise: Deep troubleshooting knowledge of Windows 10/11, terminal/command-line operations, and driver management.
- Directory & Cloud Services: Experience with Active Directory and Microsoft 365 administration.
- Certifications (Preferred): Microsoft Certified: Modern Desktop Administrator Associate
Performance Expectations
- Maintain an average ticket resolution time within defined SLAs.
- Keep internal spare-parts inventory stocked and audited monthly.
- Reduce hardware replacement costs by maximizing the lifespan of out-of-warranty devices through in-house component-level repairs.
Interview process - Face to Face
Job Summary:
We are looking for an experienced L2 Production Support Engineer with hands-on experience in production monitoring, event management, incident management, troubleshooting, and root cause analysis (RCA). The candidate should have experience working with enterprise monitoring tools and ITSM platforms to ensure application stability and smooth production operations.
Mandatory Skills:
- L2 Production Support
- Event Management / Mission Control
- Incident Management
- Linux / Unix
- Observability and Production Monitoring
- Batch Monitoring
Primary Skills:
- ServiceNow
- Splunk / AppDynamics / ThousandEyes
- Event Monitoring and Incident Handling
- Production Troubleshooting
Secondary Skills:
- Batch Monitoring and Scheduling
- Windows Server Troubleshooting
- Root Cause Analysis (RCA)
- Cross-team Coordination
Key Responsibilities:
- Monitor production environments and identify alerts, events, and potential issues.
- Handle L2 production incidents and perform initial troubleshooting.
- Manage incidents and service requests using ServiceNow or similar ITSM tools.
- Analyze application and system logs using monitoring tools such as Splunk, AppDynamics, or ThousandEyes.
- Perform root cause analysis and coordinate with relevant teams to resolve recurring issues.
- Monitor batch jobs and schedules, ensuring timely execution.
- Troubleshoot Linux/Unix and Windows Server-related issues.
- Ensure adherence to SLAs and follow established incident management processes.











