Cutshort logo
For Employers
NeoGenCode Technologies Pvt Ltd logo
L2 Operations Lead – Malware Tools
L2 Operations Lead – Malware Tools

L2 Operations Lead – Malware Tools at NeoGenCode Technologies Pvt Ltd · Gurugram · 10 - 15 years · ₹10L - ₹18L / yr · Raised funding · Posted 26 Oct 2026

NeoGenCode Technologies Pvt Ltd's logo

L2 Operations Lead – Malware Tools

Akshay Patil's profile picture
Posted by Akshay Patil
10 - 15 yrs
₹10L - ₹18L / yr
Gurugram
Skills
CrowdStrike Falcon
Endpoint detection and response
Endpoint Security
Malware Detection
Malware Investigation
Alert Triage
Threat Containment
Microsoft Defender
ServiceNow
Security Information and Event Management (SIEM)
Splunk
Microsoft Windows Server
Incident management
Operations support system
Powershell

Job Title : L2 Operations Lead – Malware Tools

Experience : 10+ Years

Location : Gurugram

Work Mode : Hybrid – 2 Days in Office

Employment Type : Full-Time

Engagement Duration : 6+ Months

Number of Positions : 1

Support Level : L2 Operations

Domain : Endpoint Security & Malware Protection


About the Role :

We are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.

The role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.


Mandatory Skills :

CrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.


Key Responsibilities :

  • Manage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.
  • Monitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.
  • Administer and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.
  • Investigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.
  • Troubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.
  • Install, configure, update, and maintain antivirus and endpoint protection solutions across servers.
  • Manage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.
  • Escalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.
  • Maintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.
  • Participate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.
  • Develop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.
  • Analyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.
  • Collaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.
  • Ensure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).
  • Provide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.


Required Technical Skills :

  • Endpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.
  • CrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.
  • Microsoft Defender : Knowledge of endpoint protection and malware detection capabilities.
  • Malware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.
  • ITSM : Experience with incident, problem, and change management processes.
  • Security Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.
  • Operating Systems : Strong knowledge of Windows operating systems and endpoint security administration.
  • Scripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.
  • Monitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.


Tools & Technologies :

  • CrowdStrike Falcon
  • Microsoft Defender
  • ServiceNow
  • Splunk SIEM
  • SOAR Platforms
  • DataDog
  • Antivirus and Endpoint Detection & Response (EDR) Solutions
  • Windows Server and Windows Operating Systems
  • Python / PowerShell


Required Experience & Qualifications :

  • 10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.
  • Proven experience supporting endpoint protection and malware security tools in an enterprise environment.
  • Hands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.
  • Experience troubleshooting endpoint security agents and resolving security incidents.
  • Strong understanding of malware investigation, alert triage, threat containment, and escalation procedures.
  • Experience working in a 24×7 operational support environment.
  • Good understanding of ITSM processes, including incident, problem, and change management.
  • Experience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.
  • Strong analytical, troubleshooting, and problem-solving skills.
  • Excellent written and verbal English communication skills.
  • Ability to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.


Preferred Certifications :

  • CrowdStrike Falcon Administrator
  • Microsoft Certified: Security Operations Analyst Associate (SC-200)
  • CompTIA Security+


Key Performance Expectations :

  • Timely resolution of L2 incidents within defined SLAs.
  • Effective investigation and containment of malware and endpoint security threats.
  • Reduced recurrence of incidents through RCA and preventive actions.
  • Accurate incident documentation and timely escalations.
  • Improved endpoint agent health, security coverage, and operational efficiency.
  • Compliance with client security standards and operational procedures.


Ideal Candidate Profile :

The ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.

Read more
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos

About NeoGenCode Technologies Pvt Ltd

Founded :
2023
Type :
Services
Size :
20-100
Stage :
Raised funding

About

Welcome to Neogencode Technologies, an IT services and consulting firm that provides innovative solutions to help businesses achieve their goals. Our team of experienced professionals is committed to providing tailored services to meet the specific needs of each client. Our comprehensive range of services includes software development, web design and development, mobile app development, cloud computing, cybersecurity, digital marketing, and skilled resource acquisition. We specialize in helping our clients find the right skilled resources to meet their unique business needs. At Neogencode Technologies, we prioritize communication and collaboration with our clients, striving to understand their unique challenges and provide customized solutions that exceed their expectations. We value long-term partnerships with our clients and are committed to delivering exceptional service at every stage of the engagement. Whether you are a small business looking to improve your processes or a large enterprise seeking to stay ahead of the competition, Neogencode Technologies has the expertise and experience to help you succeed. Contact us today to learn more about how we can support your business growth and provide skilled resources to meet your business needs.

Read more

Candid answers by the company

What does the company do?
What is the location preference of jobs?

IT & Engineering Talent Staffing

  • Provides full-time and contract-based hiring, delivering handpicked, pre‑screened developers across tech stacks—ranging from web, mobile, AI/ML, Web3/blockchain.
  • Maintains a bench o vetted candidates, offering fast delivery of interview-ready profiles—often within 24 hours.
  • Offers payroll management, handling compliance, tax, attendance, and documentation for both contractors and full-time employees.

2. End-to-End Project Delivery

  • Delivers full-stack development solutions: web, mobile, cloud, AI/ML, Blockchain/Web3.
  • Manages entire project lifecycle—requirements gathering, design (UI/UX), development, deployment, and ongoing support .

3. Additional Offerings

  • Expands into cybersecurity consulting, digital marketing, and cloud platform services (like AWS, GCP, Azure) .
  • Provides strategic IT consulting to align technology solutions with business objectives

Company social profiles

bloginstagramlinkedinfacebook

Similar jobs (10)

Noida
6 - 10 yrs
₹9L - ₹12L / yr
Intune
Active Directory
Microsoft 365
Powershell
Microsoft Windows Server
+3 more

About Solutionara

Solutionara is a U.S.-headquartered IT Consulting & Technology Services firm with a rapidly growing Global Delivery Center in Noida, India. We specialize in enterprise integration, data platforms, cloud engineering, and digital experience technologies. Our clients trust us to modernize their technology landscape, streamline operations, and build data-driven digital products.

At Solutionara, we operate with a builder mindset — high ownership, hands-on problem solving, and a culture where innovation is not a slogan but a standard. If you want to grow in an environment where your work contributes to real enterprise systems and digital platforms, you will thrive here.

Location: Noida, India (On-site – Global Delivery Center, Sector 62)

Experience: 6 – 10 years

Employment Type: Full-time

Role Summary

The IT Systems & Endpoint Lead will be responsible for managing and overseeing Solutionara's endpoint environment, user access, and core IT systems across cloud and on-premise infrastructure. This role combines hands-on system administration with operational ownership, ensuring endpoint compliance, identity governance, and reliable IT operations across the organization. The ideal candidate will act as a key operational anchor, driving stability, enforcing IT policies, and supporting a secure and scalable environment.

Key Responsibilities

Endpoint & Identity Ownership

  • Own user identity and access management across Microsoft Entra ID and hybrid Active Directory
  • Manage and enforce endpoint compliance using Microsoft Intune
  • Ensure consistent enforcement of MFA, Conditional Access, and device policies
  • Maintain role-based access control (RBAC) and support periodic access reviews

Infrastructure & Systems Management

  • Oversee Windows Server environments and core infrastructure services
  • Administer Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive)
  • Drive patch management, system health monitoring, and uptime reliability
  • Identify and implement automation opportunities using PowerShell

IT Operations & Support Oversight

  • Handle complex L2/L3 issues and provide escalation support
  • Guide junior IT staff or vendors for L1/L2 support activities
  • Oversee device provisioning, onboarding, and lifecycle management
  • Ensure accurate asset tracking and IT documentation

Security & Compliance Execution

  • Ensure enforcement of endpoint security policies (Defender, BitLocker, compliance baselines)
  • Support Conditional Access, identity security, and policy enforcement
  • Participate in audit readiness, compliance checks, and documentation
  • Monitor risks and escalate security gaps proactively

Network & Access Coordination

  • Oversee LAN, VPN, and Wi-Fi operations in coordination with network partners
  • Maintain access control records, VLANs, and network documentation
  • Troubleshoot and resolve advanced connectivity issues

Qualifications & Skills

Education & Experience

  • Bachelor's degree in Computer Science, IT, or related field
  • 6–10 years of experience in IT infrastructure, endpoint management, or system administration

Core Technical Skills

  • Strong hands-on experience with Microsoft Entra ID, Intune, Windows Server, and Microsoft 365
  • Experience managing endpoint compliance and identity access
  • Solid understanding of Conditional Access, MFA, and access governance
  • Good knowledge of networking fundamentals (LAN, VPN, firewall basics)
  • Experience with ITSM tools (JIRA, ServiceNow)
  • PowerShell scripting for automation and reporting

Preferred Skills

  • Exposure to Microsoft Defender (Endpoint / O365)
  • Understanding of basic security best practices and audit requirements
  • Experience supporting compliance or audit activities

Certifications (Preferred)

  • Microsoft Certified: Azure Administrator Associate (AZ-104)
  • Microsoft Certified: Modern Desktop Administrator (MD-102)
  • CompTIA Security+ / Network+
  • ITIL Foundation

Soft Skills

  • Strong ownership and accountability mindset
  • Good communication and stakeholder coordination skills
  • Ability to mentor junior team members
  • Structured problem-solving and decision-making ability
  • Ability to operate in a fast-paced, evolving environment
Read more
Bean HR Consulting
snigdha Khurana
Posted by snigdha Khurana
Gurugram
7 - 10 yrs
Best in industry
Cyber Security
IAM
Identity management
Security operations
Security Information and Event Management (SIEM)

📢 We're Hiring | Cybersecurity Consultant | Gurugram


Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana



We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.


🔹 Key Responsibilities

  • Manage and strengthen security controls across enterprise IT infrastructure.
  • Perform vulnerability assessments, remediation tracking and patch management.
  • Monitor security alerts, investigate incidents and support threat hunting.
  • Implement and manage SIEM, EDR and endpoint security solutions.
  • Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
  • Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
  • Assist with backup, recovery, disaster recovery and business continuity activities.
  • Maintain security documentation, remediation evidence and audit compliance.


🔹 Required Skills

  • 7+ years of relevant experience in cybersecurity, security engineering or security operations.
  • Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
  • Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
  • Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
  • Strong understanding of incident response, threat hunting, network security and security remediation.
  • Experience with EDR, IAM and enterprise security controls.


⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.


📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Read more
Gurugram
5 - 8 yrs
₹6L - ₹10L / yr
Identity management
Identity & Access Management
L2 Operations
Azure AD
Microsoft Entra ID
+10 more

Job Title : L2 Operations Lead – Identity & Access Management (IDAM)

Experience : 5+ Years

Location : Gurugram Sector 59, Haryana

Work Mode : Hybrid

Support Level : L2 Operations

Domain : Identity & Access Management (IDAM)


Job Summary :

We are looking for an experienced L2 Operations Lead – IDAM to manage and support enterprise Identity and Access Management services. The ideal candidate should have hands-on experience with Azure AD (Microsoft Entra ID), Active Directory, Okta, CyberArk, access provisioning, and ITSM processes.

The role involves handling L1 / L2 escalations, troubleshooting identity and access issues, supporting privileged access management, maintaining operational documentation, participating in incident reviews, and coordinating with L3 engineering and other infrastructure teams to ensure service stability and security.


Mandatory Skills : IDAM, IAM, L2 Operations, Azure AD, Microsoft Entra ID, Active Directory, Okta, CyberArk, PAM, SSO, MFA, Access Provisioning, PowerShell, ServiceNow, Incident Management, ITIL, Identity Governance.


Key Responsibilities :

  • Provide L1 / L2 operational support for Identity and Access Management services in an enterprise environment.
  • Manage end-to-end incident resolution, from L1 / L1.5 escalation through investigation, resolution, and closure.
  • Administer user access provisioning, modification, de-provisioning, and application access requests.
  • Troubleshoot Azure AD, Active Directory, Okta, SSO, MFA, authentication, authorization, and access-related issues.
  • Support CyberArk operations, privileged access management (PAM), and access control processes.
  • Investigate directory service misconfigurations, access failures, and identity-related connectivity or routing issues.
  • Maintain accurate ServiceNow tickets with clear investigation details, resolution steps, and closure notes.
  • Participate in Major Incident Management (MIM) calls and assess whether incidents meet major incident criteria.
  • Support root cause analysis (RCA), problem management, and change management activities.
  • Maintain and update standard operating procedures (SOPs), knowledge-base articles, and operational documentation.
  • Perform or coordinate backup and restoration of IAM service configurations, as applicable.
  • Prepare periodic and on-demand operational reports, analyze incident trends, and present service performance updates.
  • Lead or facilitate monthly service review meetings and participate in weekly engineering calls.
  • Coordinate with Hosting, Network Security, DLP, Malware Protection, and other infrastructure teams to resolve cross-functional issues.
  • Coordinate with relevant vendors for break-fix support and replacement of applicable infrastructure components.
  • Support access-request certification and validation activities as part of Tier 0 access operations.
  • Identify opportunities to automate repetitive IAM operations using PowerShell and other supported tools.
  • Follow security policies, access governance standards, and operational compliance requirements.


Required Technical Skills :

  • Identity & Directory Services : Azure AD (Microsoft Entra ID), Active Directory.
  • Identity and Access Management : User lifecycle management, access provisioning, de-provisioning, access reviews, and entitlement management.
  • SSO & Authentication : Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication and authorization troubleshooting.
  • Privileged Access Management : CyberArk administration and operational support.
  • Identity Platform : Okta administration and troubleshooting.
  • ITSM : ServiceNow incident, problem, and change management.
  • Scripting : PowerShell for troubleshooting, administration, and operational automation.
  • Documentation & Reporting : SOPs, knowledge-base management, incident reporting, and trend analysis.


Preferred Tools & Technologies :

  • Semperis
  • Veza – Identity Security Posture Management (ISPM) and entitlement management
  • CrowdStrike
  • Microsoft Defender


Experience Requirements :

  • 5+ years of relevant experience in Identity & Access Management, identity operations, or directory services administration.
  • Hands-on experience in L2 production support and incident management.
  • Experience supporting enterprise IAM environments with Azure AD, Active Directory, Okta, and / or CyberArk.
  • Understanding of 24x7 operational support, escalation management, and service restoration processes.
  • Experience working with ITIL-based incident, problem, and change management processes.
  • Ability to coordinate with L3 engineering teams, security teams, infrastructure teams, and external vendors.
  • Strong analytical, troubleshooting, documentation, and communication skills.
  • Good verbal and written English communication skills.


Preferred Certifications :

  • Microsoft Certified: Identity and Access Administrator Associate (SC-300)
  • Okta Certified Professional
  • CyberArk Defender
  • Agile Practitioner Certification


Ideal Candidate Profile :

The ideal candidate is a hands-on IAM operations professional with strong troubleshooting skills, experience handling L2 escalations, and the ability to coordinate operational activities across multiple teams. Candidates with practical experience in directory services, SSO/MFA, privileged access management, access lifecycle operations, and ServiceNow are preferred.

Read more
NeoGenCode Technologies Pvt Ltd
Akshay Patil
Posted by Akshay Patil
Gurugram
8 - 16 yrs
₹10L - ₹20L / yr
Security Service Delivery
SecOps
MSP
24*7 Operations
Network Security
+14 more

Job Title : Security Delivery Lead

Experience : 8+ Years

Location : Gurugram Sector 59

Working Mode : Hybrid (2 Days WFO)

Domain : IT Infrastructure & Security Operations


Job Overview :

We are looking for an experienced Security Delivery Lead to manage end-to-end 24x7 L1 / L2 Security Operations for a large enterprise client. The candidate will be responsible for managing multiple security towers, client relationships, service delivery, SLAs, escalations, commercial governance, and team management.


Mandatory skills :

Security Service Delivery, SecOps, MSP, 24x7 Operations, Network Security, IDAM, DLP, Endpoint Security, Zscaler, Palo Alto, Entra ID, CyberArk, CrowdStrike, ServiceNow, SLA Management, MIM, RCA, Client Management, Contract Management.


Key Responsibilities :

  • Manage end-to-end 24x7 L1 / L2 Security Operations across Network Security, IDAM, Endpoint / Malware Security, DLP, and SecOps Command Center.
  • Act as the primary point of contact for client stakeholders and senior management.
  • Manage SLAs, KPIs, service reviews, operational reports, and governance meetings.
  • Handle P1 / P2 incidents, Major Incident Management (MIM), escalations, and RCA.
  • Manage team capacity, shift rosters, resource planning, and performance of 20+ engineers.
  • Handle monthly invoicing, SOW, contractual obligations, change requests, and service credits.
  • Ensure security compliance, audit readiness, and continuous service improvement.
  • Drive automation, process optimization, and reduction of recurring incidents.


Required Skills :

  • Strong experience in Security Operations and Infrastructure Managed Services (MSP).
  • Experience managing multiple security towers in a 24x7 environment.
  • Good understanding of Network Security, IDAM, DLP, Endpoint Security, and Email Security.
  • Working knowledge of Zscaler, Palo Alto, Microsoft Defender, CrowdStrike, Entra ID, CyberArk, and Microsoft Purview.
  • Strong expertise in ServiceNow, SLA / KPI management, MIM, RCA, and ITIL processes.
  • Experience in client management, commercial governance, invoicing, and contract reviews.
  • Excellent communication and stakeholder management skills.


Experience Requirements :

  • 8+ years of overall IT / Security Operations experience.
  • 5+ years of Security Service Delivery / Leadership experience in an MSP environment.
  • Must have managed 24x7 security operations and teams of 20+ engineers.
  • Experience handling global enterprise clients and senior-level escalations.


Preferred Certifications :

  • CISSP / CISM
  • ITIL 4 Foundation
  • Microsoft SC-100 / SC-200
  • Zscaler or Palo Alto certifications

Certifications are preferred, not mandatory.

Read more
Metadome.ai
at Metadome.ai
2 candid answers
Ananya  Arenavaru
Posted by Ananya Arenavaru
Bengaluru (Bangalore)
5 - 10 yrs
₹15L - ₹18L / yr
Jump Cloud
Sophos
google workspace
SSO
Sophos Central administration
+10 more

IT Systems Engineer

Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure

Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership

Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at

scale.

The Mission

About Metadome.ai

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the

Metaverse Standards Forum and the VR/AR Association.


About the Role

We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.


Core Responsibilities

● Identity & Access Management — JumpCloud:

○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.

○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.

○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

● Google Workspace Administration — GWS:

○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,

and sharing / visibility policies.○

○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.


Endpoint & Threat Protection — Sophos:

○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and

servers.

○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.

○ Maintain endpoint encryption, web / application control, and device-hardening standards.

○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.


Network, Firewall & Wi-Fi:

○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

○ Administer enterprise Wi-Fi and wired networks (switches, access points), including

RADIUS-backed authentication.

○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

○ Implement network monitoring, intrusion detection, and centralized logging.

Hardware, Software & Asset Management:

○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and

decommissioning.

○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

○ Maintain an accurate hardware and software inventory and asset register.

○ Manage software deployment, patch management, and license compliance.


Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:

○ Operate and continuously improve the company's Information Security Management System

(ISMS).

○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control

implementation, evidence collection, and continuous monitoring.

○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA

assessments.

○ Serve as a primary point of contact during external audits and customer security reviews.

○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response

runbooks.

○ Drive security-awareness and phishing-simulation programs across the organization.


IT Operations & Support:

○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

○ Manage backups, disaster recovery, and business-continuity testing.

○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within

budget.

○ Maintain documentation, runbooks, and standard operating procedures.

○ Own and report on the IT budget and asset allocation.


Required Skills & Experience

● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems

below rather than purely supervisory exposure.

● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.

● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.

● Sophos — hands-on endpoint / XDR administration and threat response.

● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.

● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one

full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.


Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.


Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.


Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.


Preferred Qualifications


●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.

●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

●Scripting and automation for IT operations (Bash, PowerShell, or Python).

●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.


Why Join Us

You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running

flawlessly.



Read more
icon

The recruiter has not been active on this job recently. You may apply but please expect a delayed response.

Bengaluru (Bangalore)
6 - 12 yrs
₹18L - ₹20L / yr
Forcepoint
forcepoint DLP
Forcepoint Implementation
Forcepoint configuration
Forcepoint SWG
+4 more

Position: Technical Lead – Forcepoint (Data & Cloud Security)


Company: Inflow Technologies

Location: Bangalore

Work Mode: Work From Office | 5 days/week

Experience Required: Minimum 6 years

Interview Process: 2 rounds (Virtual + Final Face-to-Face)


About Inflow Technologies

Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.


Position Overview

Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.


Core Products

  • Forcepoint DLP (Endpoint, Network, Web, Email)
  • Forcepoint Web Security
  • Forcepoint Email Security
  • Forcepoint CASB
  • Forcepoint Suite / Forcepoint One
  • Forcepoint Cloud Security / SSE (incl. ZTNA)
  • Forcepoint DSPM


Key Responsibilities

1. Solution Design & Architecture

  • Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
  • Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
  • Implement EDM/IDM/OCR and data classification policies

2. Web Security (SWG)

  • Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
  • Configure transparent/explicit proxy, SSL inspection, URL filtering

3. Email Security

  • Configure SMTP routing, DLP email policies, encryption & compliance rules

4. Advanced Policy Configuration

  • Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules

5. L3 Troubleshooting & RCA (Critical)

  • Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
  • Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix

Qualifications & Certifications (Preferred)

  • Bachelor's degree (IT/CS or related)
  • Forcepoint Certified Administrator (FCA)
  • Forcepoint DLP Specialist
  • CCNA / Security+ (nice-to-have)


Read more
coppergate
Sankar S
Posted by Sankar S
Mumbai
8 - 12 yrs
₹3L - ₹4.5L / yr
Cisco Certified Network Associate (CCNA)
Fortinet
fortigate
Microsoft Windows Server
CrowdStrike
+1 more

Job Summary

 

We are looking for an experienced IT Support Engineer to manage IT infrastructure, provide technical support, troubleshoot hardware and software issues, and ensure smooth day-to-day IT operations.

 

The ideal candidate should have strong networking and troubleshooting skills, along with hands-on experience in Fortinet/FortiGate, CCNA-level networking, Windows Server, and CrowdStrike.

 

Key Responsibilities :

 

Provide day-to-day IT support and troubleshoot hardware, software, and network-related issues.

Configure, manage, and troubleshoot Fortinet/FortiGate firewalls.

Handle network administration, including LAN, WAN, connectivity, and network security.

Manage and support Windows Server environments.

Monitor and manage endpoint security using CrowdStrike.

Diagnose and resolve technical issues promptly to minimize downtime.

Maintain IT infrastructure, system configurations, and technical documentation.

Ensure system security, network reliability, and smooth IT operations.


Required Skills :

 

Strong experience in IT Support and IT infrastructure management.

Hands-on knowledge of Fortinet/FortiGate and/or CCNA-level networking.

Working knowledge of Windows Server administration.

Experience with CrowdStrike endpoint security.

Excellent troubleshooting, networking, and problem-solving skills.

Good communication and coordination skills.

 

Read more
MNC
Bengaluru (Bangalore)
4 - 5 yrs
₹2L - ₹6L / yr
Production support
Event Management
Linux/Unix
Splunk
AppDynamics
+3 more
  1. Job Summary
  2. We are looking for an experienced L2 Production Support Engineer to manage production incidents, monitor application and infrastructure health, and ensure high availability of business-critical services. The candidate will be responsible for event management, incident triage, root cause analysis, alert monitoring, and coordination with L1, L3, DevOps, infrastructure, and application teams through a Mission Control environment.
  3. The ideal candidate should have hands-on experience with ServiceNow, Splunk, AppDynamics, ThousandEyes, and production monitoring tools.
  4. Key Responsibilities
  • Monitor production applications, infrastructure, and business services using monitoring and observability tools.
  • Perform L2 production support activities, including incident investigation, troubleshooting, and resolution.
  • Manage real-time alerts, events, and incidents through the Event Management / Mission Control function.
  • Monitor application logs, system performance, availability, and transaction failures using Splunk, AppDynamics, and ThousandEyes.
  • Analyze alerts and correlate events to identify potential service disruptions and reduce alert noise.
  • Create, update, assign, and track incidents, problems, and change requests in ServiceNow.
  • Perform initial impact assessment, incident prioritization, and escalation based on severity and SLA requirements.
  • Troubleshoot application errors, service outages, connectivity issues, performance degradation, and recurring incidents.
  • Collaborate with L1 support, L3 engineering, application development, database, network, middleware, and infrastructure teams.
  • Perform root cause analysis (RCA) and contribute to problem management and preventive action plans.
  • Support major incident management, bridge calls, stakeholder communication, and service restoration activities.
  • Maintain incident documentation, troubleshooting procedures, operational runbooks, and knowledge articles.
  • Identify recurring alerts and incidents and recommend automation or monitoring improvements.
  • Participate in shift rotations, weekend support, and 24/7 operations, as required.
  • Ensure compliance with operational procedures, SLAs, OLAs, and ITIL best practices.
  1. Required Technical Skills
  2. 1. L2 Production Support
  • Hands-on experience in application or infrastructure production support.
  • Incident triage, troubleshooting, service restoration, and escalation management.
  • Knowledge of application logs, system health checks, and performance monitoring.
  • Experience supporting business-critical production environments.
  1. 2. Event Management / Mission Control
  • Experience with real-time event monitoring and alert management.
  • Ability to correlate events, identify service-impacting alerts, and prioritize incidents.
  • Knowledge of event-to-incident workflows and major incident escalation procedures.
  • Experience working in a centralized IT operations or Mission Control environment.
  1. 3. ServiceNow
  • Experience with ServiceNow Incident Management, Problem Management, and Change Management.
  • Ability to create, update, assign, and resolve incidents while maintaining accurate ticket documentation.
  • Understanding of incident priority, severity, SLA tracking, and escalation workflows.
  • Exposure to ServiceNow ITOM / Event Management is an advantage.
  1. 4. Monitoring and Observability Tools
  • Splunk: Log analysis, searching, filtering, troubleshooting, and identifying application errors.
  • AppDynamics: Application performance monitoring, transaction tracing, response-time analysis, and identifying bottlenecks.
  • ThousandEyes: Network and application connectivity monitoring, path visualization, latency analysis, packet loss, and availability troubleshooting.
  1. 5. Additional Technical Knowledge
  • Basic understanding of Linux/Unix and Windows operating systems.
  • Knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, latency, and connectivity troubleshooting.
  • Basic SQL knowledge for data validation and troubleshooting.
  • Understanding of REST APIs, web applications, middleware, and distributed application environments is preferred.
  1. Required Qualifications
  • Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
  • 3–7 years of experience in IT production support, application support, or IT operations.
  • Hands-on experience with ServiceNow and at least one major monitoring or observability tool.
  • Strong analytical, troubleshooting, communication, and incident management skills.
  • Familiarity with ITIL processes and SLA-driven support environments.
  • Ability to work under pressure and handle multiple production incidents simultaneously.
  1. Preferred Qualifications
  • ITIL Foundation certification.
  • Experience with ServiceNow ITOM / Event Management.
  • Exposure to major incident management and root cause analysis.
  • Experience in enterprise, banking, telecom, retail, or other high-availability environments.
  • Knowledge of automation and scripting using Shell, Python, or PowerShell.
  1. Key Performance Indicators (KPIs)
  • Incident response and resolution time.
  • SLA compliance.
  • Mean Time to Acknowledge (MTTA) and Mean Time to Resolve (MTTR).
  • Production service availability and monitoring effectiveness.
  • Reduction in recurring incidents and false-positive alerts.
  • Quality of incident documentation and root cause analysis.
  1. Ideal Candidate Profile
  2. The ideal candidate is a technically strong L2 Production Support Engineer with hands-on experience in incident and event management, ServiceNow ticketing, production monitoring, and application/network troubleshooting. The candidate should be capable of quickly identifying service-impacting issues, coordinating with resolver teams, and restoring services while maintaining SLA commitments and operational stability.
  3. Key skills for the role
  • L2 Production Support
  • Event Management / Mission Control
  • ServiceNow ITSM / ITOM
  • Production Monitoring and Alert Management
  • Splunk
  • AppDynamics
  • ThousandEyes
  • Incident, Problem and Major Incident Management
  • Root Cause Analysis (RCA)
  • ITIL and SLA Management


Read more
MNC
Hyderabad
3 - 4 yrs
₹2L - ₹5.5L / yr
Production Suppor
Event Management
ServiceNow
Splunk
skill icongrafana
+2 more

Experience: 3–4 Years

Location: Hyderabad

Job Responsibilities:

  • Provide L2 production support and troubleshoot application or infrastructure issues.
  • Monitor alerts and incidents using Splunk, AppDynamics, or ThousandEyes.
  • Perform event management, incident analysis, and root cause identification.
  • Manage incidents, service requests, and escalations through ServiceNow.
  • Coordinate with L1, L3, and relevant teams to ensure timely issue resolution.
  • Monitor system performance and maintain service availability.

Required Skills:

  • Hands-on experience in L2 Production Support.
  • Knowledge of Event Management and Incident Management.
  • Experience with ServiceNow.
  • Working knowledge of Splunk, AppDynamics, or ThousandEyes.
  • Strong troubleshooting, analytical, and communication skills.


Read more
MNC
Bengaluru (Bangalore)
4 - 5 yrs
₹1L - ₹5L / yr
Production support
Linux/Unix
Splunk
ServiceNow

Mandatory Skills: L2 Production Support, Event Management / Mission Control, Incident Management, Linux, Linux, observability, and batch monitoring


Primary Skills:

  • L2 Production Support, Event Management / Mission Control, ServiceNow, Production Monitoring, Splunk / AppDynamics / ThousandEyes
Read more
Why apply to jobs via Cutshort
people_solving_puzzle
Personalized job matches
Stop wasting time. Get matched with jobs that meet your skills, aspirations and preferences.
people_verifying_people
Verified hiring teams
See actual hiring teams, find common social connections or connect with them directly.
ai_chip
Move faster with AI
We use AI to get you faster responses, recommendations and unmatched user experience.
Did not find a job you were looking for?
icon
Search for relevant jobs from 10000+ companies such as Google, Amazon & Uber actively hiring on Cutshort.
companies logo
companies logo
companies logo
companies logo
companies logo
Get to hear about interesting companies hiring right now
Company logo
Company logo
Company logo
Company logo
Company logo
Linkedin iconFollow Cutshort
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos