L2 Operations Lead – Malware Tools at NeoGenCode Technologies Pvt Ltd · Gurugram · 10 - 15 years · ₹10L - ₹18L / yr · Raised funding · Posted 26 Oct 2026

Job Title : L2 Operations Lead – Malware Tools
Experience : 10+ Years
Location : Gurugram
Work Mode : Hybrid – 2 Days in Office
Employment Type : Full-Time
Engagement Duration : 6+ Months
Number of Positions : 1
Support Level : L2 Operations
Domain : Endpoint Security & Malware Protection
About the Role :
We are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.
The role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.
Mandatory Skills :
CrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.
Key Responsibilities :
- Manage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.
- Monitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.
- Administer and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.
- Investigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.
- Troubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.
- Install, configure, update, and maintain antivirus and endpoint protection solutions across servers.
- Manage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.
- Escalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.
- Maintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.
- Participate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.
- Develop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.
- Analyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.
- Collaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.
- Ensure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).
- Provide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.
Required Technical Skills :
- Endpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.
- CrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.
- Microsoft Defender : Knowledge of endpoint protection and malware detection capabilities.
- Malware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.
- ITSM : Experience with incident, problem, and change management processes.
- Security Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.
- Operating Systems : Strong knowledge of Windows operating systems and endpoint security administration.
- Scripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.
- Monitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.
Tools & Technologies :
- CrowdStrike Falcon
- Microsoft Defender
- ServiceNow
- Splunk SIEM
- SOAR Platforms
- DataDog
- Antivirus and Endpoint Detection & Response (EDR) Solutions
- Windows Server and Windows Operating Systems
- Python / PowerShell
Required Experience & Qualifications :
- 10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.
- Proven experience supporting endpoint protection and malware security tools in an enterprise environment.
- Hands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.
- Experience troubleshooting endpoint security agents and resolving security incidents.
- Strong understanding of malware investigation, alert triage, threat containment, and escalation procedures.
- Experience working in a 24×7 operational support environment.
- Good understanding of ITSM processes, including incident, problem, and change management.
- Experience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal English communication skills.
- Ability to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.
Preferred Certifications :
- CrowdStrike Falcon Administrator
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- CompTIA Security+
Key Performance Expectations :
- Timely resolution of L2 incidents within defined SLAs.
- Effective investigation and containment of malware and endpoint security threats.
- Reduced recurrence of incidents through RCA and preventive actions.
- Accurate incident documentation and timely escalations.
- Improved endpoint agent health, security coverage, and operational efficiency.
- Compliance with client security standards and operational procedures.
Ideal Candidate Profile :
The ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.

About NeoGenCode Technologies Pvt Ltd
About
Welcome to Neogencode Technologies, an IT services and consulting firm that provides innovative solutions to help businesses achieve their goals. Our team of experienced professionals is committed to providing tailored services to meet the specific needs of each client. Our comprehensive range of services includes software development, web design and development, mobile app development, cloud computing, cybersecurity, digital marketing, and skilled resource acquisition. We specialize in helping our clients find the right skilled resources to meet their unique business needs. At Neogencode Technologies, we prioritize communication and collaboration with our clients, striving to understand their unique challenges and provide customized solutions that exceed their expectations. We value long-term partnerships with our clients and are committed to delivering exceptional service at every stage of the engagement. Whether you are a small business looking to improve your processes or a large enterprise seeking to stay ahead of the competition, Neogencode Technologies has the expertise and experience to help you succeed. Contact us today to learn more about how we can support your business growth and provide skilled resources to meet your business needs.
Candid answers by the company
IT & Engineering Talent Staffing
- Provides full-time and contract-based hiring, delivering handpicked, pre‑screened developers across tech stacks—ranging from web, mobile, AI/ML, Web3/blockchain.
- Maintains a bench o vetted candidates, offering fast delivery of interview-ready profiles—often within 24 hours.
- Offers payroll management, handling compliance, tax, attendance, and documentation for both contractors and full-time employees.
2. End-to-End Project Delivery
- Delivers full-stack development solutions: web, mobile, cloud, AI/ML, Blockchain/Web3.
- Manages entire project lifecycle—requirements gathering, design (UI/UX), development, deployment, and ongoing support .
3. Additional Offerings
- Expands into cybersecurity consulting, digital marketing, and cloud platform services (like AWS, GCP, Azure) .
- Provides strategic IT consulting to align technology solutions with business objectives
Similar jobs (10)
About Solutionara
Solutionara is a U.S.-headquartered IT Consulting & Technology Services firm with a rapidly growing Global Delivery Center in Noida, India. We specialize in enterprise integration, data platforms, cloud engineering, and digital experience technologies. Our clients trust us to modernize their technology landscape, streamline operations, and build data-driven digital products.
At Solutionara, we operate with a builder mindset — high ownership, hands-on problem solving, and a culture where innovation is not a slogan but a standard. If you want to grow in an environment where your work contributes to real enterprise systems and digital platforms, you will thrive here.
Location: Noida, India (On-site – Global Delivery Center, Sector 62)
Experience: 6 – 10 years
Employment Type: Full-time
Role Summary
The IT Systems & Endpoint Lead will be responsible for managing and overseeing Solutionara's endpoint environment, user access, and core IT systems across cloud and on-premise infrastructure. This role combines hands-on system administration with operational ownership, ensuring endpoint compliance, identity governance, and reliable IT operations across the organization. The ideal candidate will act as a key operational anchor, driving stability, enforcing IT policies, and supporting a secure and scalable environment.
Key Responsibilities
Endpoint & Identity Ownership
- Own user identity and access management across Microsoft Entra ID and hybrid Active Directory
- Manage and enforce endpoint compliance using Microsoft Intune
- Ensure consistent enforcement of MFA, Conditional Access, and device policies
- Maintain role-based access control (RBAC) and support periodic access reviews
Infrastructure & Systems Management
- Oversee Windows Server environments and core infrastructure services
- Administer Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive)
- Drive patch management, system health monitoring, and uptime reliability
- Identify and implement automation opportunities using PowerShell
IT Operations & Support Oversight
- Handle complex L2/L3 issues and provide escalation support
- Guide junior IT staff or vendors for L1/L2 support activities
- Oversee device provisioning, onboarding, and lifecycle management
- Ensure accurate asset tracking and IT documentation
Security & Compliance Execution
- Ensure enforcement of endpoint security policies (Defender, BitLocker, compliance baselines)
- Support Conditional Access, identity security, and policy enforcement
- Participate in audit readiness, compliance checks, and documentation
- Monitor risks and escalate security gaps proactively
Network & Access Coordination
- Oversee LAN, VPN, and Wi-Fi operations in coordination with network partners
- Maintain access control records, VLANs, and network documentation
- Troubleshoot and resolve advanced connectivity issues
Qualifications & Skills
Education & Experience
- Bachelor's degree in Computer Science, IT, or related field
- 6–10 years of experience in IT infrastructure, endpoint management, or system administration
Core Technical Skills
- Strong hands-on experience with Microsoft Entra ID, Intune, Windows Server, and Microsoft 365
- Experience managing endpoint compliance and identity access
- Solid understanding of Conditional Access, MFA, and access governance
- Good knowledge of networking fundamentals (LAN, VPN, firewall basics)
- Experience with ITSM tools (JIRA, ServiceNow)
- PowerShell scripting for automation and reporting
Preferred Skills
- Exposure to Microsoft Defender (Endpoint / O365)
- Understanding of basic security best practices and audit requirements
- Experience supporting compliance or audit activities
Certifications (Preferred)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Modern Desktop Administrator (MD-102)
- CompTIA Security+ / Network+
- ITIL Foundation
Soft Skills
- Strong ownership and accountability mindset
- Good communication and stakeholder coordination skills
- Ability to mentor junior team members
- Structured problem-solving and decision-making ability
- Ability to operate in a fast-paced, evolving environment
📢 We're Hiring | Cybersecurity Consultant | Gurugram
Role: Cybersecurity Consultant
Experience: 7+ Years
Location: Gurugram, Haryana
We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.
🔹 Key Responsibilities
- Manage and strengthen security controls across enterprise IT infrastructure.
- Perform vulnerability assessments, remediation tracking and patch management.
- Monitor security alerts, investigate incidents and support threat hunting.
- Implement and manage SIEM, EDR and endpoint security solutions.
- Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
- Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
- Assist with backup, recovery, disaster recovery and business continuity activities.
- Maintain security documentation, remediation evidence and audit compliance.
🔹 Required Skills
- 7+ years of relevant experience in cybersecurity, security engineering or security operations.
- Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
- Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
- Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
- Strong understanding of incident response, threat hunting, network security and security remediation.
- Experience with EDR, IAM and enterprise security controls.
⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.
📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com
Job Title : L2 Operations Lead – Identity & Access Management (IDAM)
Experience : 5+ Years
Location : Gurugram Sector 59, Haryana
Work Mode : Hybrid
Support Level : L2 Operations
Domain : Identity & Access Management (IDAM)
Job Summary :
We are looking for an experienced L2 Operations Lead – IDAM to manage and support enterprise Identity and Access Management services. The ideal candidate should have hands-on experience with Azure AD (Microsoft Entra ID), Active Directory, Okta, CyberArk, access provisioning, and ITSM processes.
The role involves handling L1 / L2 escalations, troubleshooting identity and access issues, supporting privileged access management, maintaining operational documentation, participating in incident reviews, and coordinating with L3 engineering and other infrastructure teams to ensure service stability and security.
Mandatory Skills : IDAM, IAM, L2 Operations, Azure AD, Microsoft Entra ID, Active Directory, Okta, CyberArk, PAM, SSO, MFA, Access Provisioning, PowerShell, ServiceNow, Incident Management, ITIL, Identity Governance.
Key Responsibilities :
- Provide L1 / L2 operational support for Identity and Access Management services in an enterprise environment.
- Manage end-to-end incident resolution, from L1 / L1.5 escalation through investigation, resolution, and closure.
- Administer user access provisioning, modification, de-provisioning, and application access requests.
- Troubleshoot Azure AD, Active Directory, Okta, SSO, MFA, authentication, authorization, and access-related issues.
- Support CyberArk operations, privileged access management (PAM), and access control processes.
- Investigate directory service misconfigurations, access failures, and identity-related connectivity or routing issues.
- Maintain accurate ServiceNow tickets with clear investigation details, resolution steps, and closure notes.
- Participate in Major Incident Management (MIM) calls and assess whether incidents meet major incident criteria.
- Support root cause analysis (RCA), problem management, and change management activities.
- Maintain and update standard operating procedures (SOPs), knowledge-base articles, and operational documentation.
- Perform or coordinate backup and restoration of IAM service configurations, as applicable.
- Prepare periodic and on-demand operational reports, analyze incident trends, and present service performance updates.
- Lead or facilitate monthly service review meetings and participate in weekly engineering calls.
- Coordinate with Hosting, Network Security, DLP, Malware Protection, and other infrastructure teams to resolve cross-functional issues.
- Coordinate with relevant vendors for break-fix support and replacement of applicable infrastructure components.
- Support access-request certification and validation activities as part of Tier 0 access operations.
- Identify opportunities to automate repetitive IAM operations using PowerShell and other supported tools.
- Follow security policies, access governance standards, and operational compliance requirements.
Required Technical Skills :
- Identity & Directory Services : Azure AD (Microsoft Entra ID), Active Directory.
- Identity and Access Management : User lifecycle management, access provisioning, de-provisioning, access reviews, and entitlement management.
- SSO & Authentication : Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication and authorization troubleshooting.
- Privileged Access Management : CyberArk administration and operational support.
- Identity Platform : Okta administration and troubleshooting.
- ITSM : ServiceNow incident, problem, and change management.
- Scripting : PowerShell for troubleshooting, administration, and operational automation.
- Documentation & Reporting : SOPs, knowledge-base management, incident reporting, and trend analysis.
Preferred Tools & Technologies :
- Semperis
- Veza – Identity Security Posture Management (ISPM) and entitlement management
- CrowdStrike
- Microsoft Defender
Experience Requirements :
- 5+ years of relevant experience in Identity & Access Management, identity operations, or directory services administration.
- Hands-on experience in L2 production support and incident management.
- Experience supporting enterprise IAM environments with Azure AD, Active Directory, Okta, and / or CyberArk.
- Understanding of 24x7 operational support, escalation management, and service restoration processes.
- Experience working with ITIL-based incident, problem, and change management processes.
- Ability to coordinate with L3 engineering teams, security teams, infrastructure teams, and external vendors.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Good verbal and written English communication skills.
Preferred Certifications :
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Okta Certified Professional
- CyberArk Defender
- Agile Practitioner Certification
Ideal Candidate Profile :
The ideal candidate is a hands-on IAM operations professional with strong troubleshooting skills, experience handling L2 escalations, and the ability to coordinate operational activities across multiple teams. Candidates with practical experience in directory services, SSO/MFA, privileged access management, access lifecycle operations, and ServiceNow are preferred.
Job Title : Security Delivery Lead
Experience : 8+ Years
Location : Gurugram Sector 59
Working Mode : Hybrid (2 Days WFO)
Domain : IT Infrastructure & Security Operations
Job Overview :
We are looking for an experienced Security Delivery Lead to manage end-to-end 24x7 L1 / L2 Security Operations for a large enterprise client. The candidate will be responsible for managing multiple security towers, client relationships, service delivery, SLAs, escalations, commercial governance, and team management.
Mandatory skills :
Security Service Delivery, SecOps, MSP, 24x7 Operations, Network Security, IDAM, DLP, Endpoint Security, Zscaler, Palo Alto, Entra ID, CyberArk, CrowdStrike, ServiceNow, SLA Management, MIM, RCA, Client Management, Contract Management.
Key Responsibilities :
- Manage end-to-end 24x7 L1 / L2 Security Operations across Network Security, IDAM, Endpoint / Malware Security, DLP, and SecOps Command Center.
- Act as the primary point of contact for client stakeholders and senior management.
- Manage SLAs, KPIs, service reviews, operational reports, and governance meetings.
- Handle P1 / P2 incidents, Major Incident Management (MIM), escalations, and RCA.
- Manage team capacity, shift rosters, resource planning, and performance of 20+ engineers.
- Handle monthly invoicing, SOW, contractual obligations, change requests, and service credits.
- Ensure security compliance, audit readiness, and continuous service improvement.
- Drive automation, process optimization, and reduction of recurring incidents.
Required Skills :
- Strong experience in Security Operations and Infrastructure Managed Services (MSP).
- Experience managing multiple security towers in a 24x7 environment.
- Good understanding of Network Security, IDAM, DLP, Endpoint Security, and Email Security.
- Working knowledge of Zscaler, Palo Alto, Microsoft Defender, CrowdStrike, Entra ID, CyberArk, and Microsoft Purview.
- Strong expertise in ServiceNow, SLA / KPI management, MIM, RCA, and ITIL processes.
- Experience in client management, commercial governance, invoicing, and contract reviews.
- Excellent communication and stakeholder management skills.
Experience Requirements :
- 8+ years of overall IT / Security Operations experience.
- 5+ years of Security Service Delivery / Leadership experience in an MSP environment.
- Must have managed 24x7 security operations and teams of 20+ engineers.
- Experience handling global enterprise clients and senior-level escalations.
Preferred Certifications :
- CISSP / CISM
- ITIL 4 Foundation
- Microsoft SC-100 / SC-200
- Zscaler or Palo Alto certifications
Certifications are preferred, not mandatory.
IT Systems Engineer
Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure
Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership
Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at
scale.
The Mission
About Metadome.ai
Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the
Metaverse Standards Forum and the VR/AR Association.
About the Role
We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.
This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.
Core Responsibilities
● Identity & Access Management — JumpCloud:
○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.
○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.
○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.
○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.
○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.
● Google Workspace Administration — GWS:
○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.
○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,
and sharing / visibility policies.○
○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.
Endpoint & Threat Protection — Sophos:
○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and
servers.
○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.
○ Maintain endpoint encryption, web / application control, and device-hardening standards.
○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.
Network, Firewall & Wi-Fi:
○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.
○ Administer enterprise Wi-Fi and wired networks (switches, access points), including
RADIUS-backed authentication.
○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.
○ Implement network monitoring, intrusion detection, and centralized logging.
Hardware, Software & Asset Management:
○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and
decommissioning.
○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.
○ Maintain an accurate hardware and software inventory and asset register.
○ Manage software deployment, patch management, and license compliance.
Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:
○ Operate and continuously improve the company's Information Security Management System
(ISMS).
○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control
implementation, evidence collection, and continuous monitoring.
○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA
assessments.
○ Serve as a primary point of contact during external audits and customer security reviews.
○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response
runbooks.
○ Drive security-awareness and phishing-simulation programs across the organization.
IT Operations & Support:
○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.
○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.
○ Manage backups, disaster recovery, and business-continuity testing.
○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within
budget.
○ Maintain documentation, runbooks, and standard operating procedures.
○ Own and report on the IT budget and asset allocation.
Required Skills & Experience
● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems
below rather than purely supervisory exposure.
● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.
● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.
● Sophos — hands-on endpoint / XDR administration and threat response.
● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.
● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one
full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.
Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.
System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.
Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.
Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.
Preferred Qualifications
●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.
●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.
●Scripting and automation for IT operations (Bash, PowerShell, or Python).
●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.
●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.
Why Join Us
You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running
flawlessly.
The recruiter has not been active on this job recently. You may apply but please expect a delayed response.
Position: Technical Lead – Forcepoint (Data & Cloud Security)
Company: Inflow Technologies
Location: Bangalore
Work Mode: Work From Office | 5 days/week
Experience Required: Minimum 6 years
Interview Process: 2 rounds (Virtual + Final Face-to-Face)
About Inflow Technologies
Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.
Position Overview
Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.
Core Products
- Forcepoint DLP (Endpoint, Network, Web, Email)
- Forcepoint Web Security
- Forcepoint Email Security
- Forcepoint CASB
- Forcepoint Suite / Forcepoint One
- Forcepoint Cloud Security / SSE (incl. ZTNA)
- Forcepoint DSPM
Key Responsibilities
1. Solution Design & Architecture
- Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
- Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
- Implement EDM/IDM/OCR and data classification policies
2. Web Security (SWG)
- Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
- Configure transparent/explicit proxy, SSL inspection, URL filtering
3. Email Security
- Configure SMTP routing, DLP email policies, encryption & compliance rules
4. Advanced Policy Configuration
- Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules
5. L3 Troubleshooting & RCA (Critical)
- Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
- Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix
Qualifications & Certifications (Preferred)
- Bachelor's degree (IT/CS or related)
- Forcepoint Certified Administrator (FCA)
- Forcepoint DLP Specialist
- CCNA / Security+ (nice-to-have)
Job Summary
We are looking for an experienced IT Support Engineer to manage IT infrastructure, provide technical support, troubleshoot hardware and software issues, and ensure smooth day-to-day IT operations.
The ideal candidate should have strong networking and troubleshooting skills, along with hands-on experience in Fortinet/FortiGate, CCNA-level networking, Windows Server, and CrowdStrike.
Key Responsibilities :
Provide day-to-day IT support and troubleshoot hardware, software, and network-related issues.
Configure, manage, and troubleshoot Fortinet/FortiGate firewalls.
Handle network administration, including LAN, WAN, connectivity, and network security.
Manage and support Windows Server environments.
Monitor and manage endpoint security using CrowdStrike.
Diagnose and resolve technical issues promptly to minimize downtime.
Maintain IT infrastructure, system configurations, and technical documentation.
Ensure system security, network reliability, and smooth IT operations.
Required Skills :
Strong experience in IT Support and IT infrastructure management.
Hands-on knowledge of Fortinet/FortiGate and/or CCNA-level networking.
Working knowledge of Windows Server administration.
Experience with CrowdStrike endpoint security.
Excellent troubleshooting, networking, and problem-solving skills.
Good communication and coordination skills.
- Job Summary
- We are looking for an experienced L2 Production Support Engineer to manage production incidents, monitor application and infrastructure health, and ensure high availability of business-critical services. The candidate will be responsible for event management, incident triage, root cause analysis, alert monitoring, and coordination with L1, L3, DevOps, infrastructure, and application teams through a Mission Control environment.
- The ideal candidate should have hands-on experience with ServiceNow, Splunk, AppDynamics, ThousandEyes, and production monitoring tools.
- Key Responsibilities
- Monitor production applications, infrastructure, and business services using monitoring and observability tools.
- Perform L2 production support activities, including incident investigation, troubleshooting, and resolution.
- Manage real-time alerts, events, and incidents through the Event Management / Mission Control function.
- Monitor application logs, system performance, availability, and transaction failures using Splunk, AppDynamics, and ThousandEyes.
- Analyze alerts and correlate events to identify potential service disruptions and reduce alert noise.
- Create, update, assign, and track incidents, problems, and change requests in ServiceNow.
- Perform initial impact assessment, incident prioritization, and escalation based on severity and SLA requirements.
- Troubleshoot application errors, service outages, connectivity issues, performance degradation, and recurring incidents.
- Collaborate with L1 support, L3 engineering, application development, database, network, middleware, and infrastructure teams.
- Perform root cause analysis (RCA) and contribute to problem management and preventive action plans.
- Support major incident management, bridge calls, stakeholder communication, and service restoration activities.
- Maintain incident documentation, troubleshooting procedures, operational runbooks, and knowledge articles.
- Identify recurring alerts and incidents and recommend automation or monitoring improvements.
- Participate in shift rotations, weekend support, and 24/7 operations, as required.
- Ensure compliance with operational procedures, SLAs, OLAs, and ITIL best practices.
- Required Technical Skills
- 1. L2 Production Support
- Hands-on experience in application or infrastructure production support.
- Incident triage, troubleshooting, service restoration, and escalation management.
- Knowledge of application logs, system health checks, and performance monitoring.
- Experience supporting business-critical production environments.
- 2. Event Management / Mission Control
- Experience with real-time event monitoring and alert management.
- Ability to correlate events, identify service-impacting alerts, and prioritize incidents.
- Knowledge of event-to-incident workflows and major incident escalation procedures.
- Experience working in a centralized IT operations or Mission Control environment.
- 3. ServiceNow
- Experience with ServiceNow Incident Management, Problem Management, and Change Management.
- Ability to create, update, assign, and resolve incidents while maintaining accurate ticket documentation.
- Understanding of incident priority, severity, SLA tracking, and escalation workflows.
- Exposure to ServiceNow ITOM / Event Management is an advantage.
- 4. Monitoring and Observability Tools
- Splunk: Log analysis, searching, filtering, troubleshooting, and identifying application errors.
- AppDynamics: Application performance monitoring, transaction tracing, response-time analysis, and identifying bottlenecks.
- ThousandEyes: Network and application connectivity monitoring, path visualization, latency analysis, packet loss, and availability troubleshooting.
- 5. Additional Technical Knowledge
- Basic understanding of Linux/Unix and Windows operating systems.
- Knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, latency, and connectivity troubleshooting.
- Basic SQL knowledge for data validation and troubleshooting.
- Understanding of REST APIs, web applications, middleware, and distributed application environments is preferred.
- Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
- 3–7 years of experience in IT production support, application support, or IT operations.
- Hands-on experience with ServiceNow and at least one major monitoring or observability tool.
- Strong analytical, troubleshooting, communication, and incident management skills.
- Familiarity with ITIL processes and SLA-driven support environments.
- Ability to work under pressure and handle multiple production incidents simultaneously.
- Preferred Qualifications
- ITIL Foundation certification.
- Experience with ServiceNow ITOM / Event Management.
- Exposure to major incident management and root cause analysis.
- Experience in enterprise, banking, telecom, retail, or other high-availability environments.
- Knowledge of automation and scripting using Shell, Python, or PowerShell.
- Key Performance Indicators (KPIs)
- Incident response and resolution time.
- SLA compliance.
- Mean Time to Acknowledge (MTTA) and Mean Time to Resolve (MTTR).
- Production service availability and monitoring effectiveness.
- Reduction in recurring incidents and false-positive alerts.
- Quality of incident documentation and root cause analysis.
- Ideal Candidate Profile
- The ideal candidate is a technically strong L2 Production Support Engineer with hands-on experience in incident and event management, ServiceNow ticketing, production monitoring, and application/network troubleshooting. The candidate should be capable of quickly identifying service-impacting issues, coordinating with resolver teams, and restoring services while maintaining SLA commitments and operational stability.
- Key skills for the role
- L2 Production Support
- Event Management / Mission Control
- ServiceNow ITSM / ITOM
- Production Monitoring and Alert Management
- Splunk
- AppDynamics
- ThousandEyes
- Incident, Problem and Major Incident Management
- Root Cause Analysis (RCA)
- ITIL and SLA Management
Experience: 3–4 Years
Location: Hyderabad
Job Responsibilities:
- Provide L2 production support and troubleshoot application or infrastructure issues.
- Monitor alerts and incidents using Splunk, AppDynamics, or ThousandEyes.
- Perform event management, incident analysis, and root cause identification.
- Manage incidents, service requests, and escalations through ServiceNow.
- Coordinate with L1, L3, and relevant teams to ensure timely issue resolution.
- Monitor system performance and maintain service availability.
Required Skills:
- Hands-on experience in L2 Production Support.
- Knowledge of Event Management and Incident Management.
- Experience with ServiceNow.
- Working knowledge of Splunk, AppDynamics, or ThousandEyes.
- Strong troubleshooting, analytical, and communication skills.
Mandatory Skills: L2 Production Support, Event Management / Mission Control, Incident Management, Linux, Linux, observability, and batch monitoring
Primary Skills:
- L2 Production Support, Event Management / Mission Control, ServiceNow, Production Monitoring, Splunk / AppDynamics / ThousandEyes











