Manager - Cyber Resilience

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

Presales - Kaspersky 

Company Name - Savex Technologies Pvt. Ltd.

Company

Location - 1- Delhi

Mode of Working - Work Form Office

Days of Working - 6 days a week(1st and 2nd Saturday is off;  remaining Saturdays are Half day working)

Responsibilities

Presales (Kaspersky) for Delhi

We are looking for a motivated Cyber Security Pre-Sales & Post-Sales Engineer with 2–3 years of experience in the cybersecurity domain.

The ideal candidate should have hands-on experience with at least one leading EDR/XDR solution and a strong willingness to learn advanced security technologies such as SIEM, NDR, OT Security, Threat Intelligence etc...

Key Responsibilities

• Deliver technical product demonstrations (Demos) to customers and partners.
• Design, deploy, and execute Proof of Concepts (POCs).
• Perform product implementation, configuration, and deployment.
• Provide post-sales technical support and solution on-boarding.
• Work closely with the sales team during customer engagements.
• Troubleshoot technical issues and ensure successful customer adoption.
• Continuously upgrade technical knowledge across emerging cybersecurity technologies.

Skills Needed

• 1–3 years of experience in Cyber Security (Pre-Sales & Implementation or Technical Support).
• Hands-on experience with endpoint security platforms — configuration, management, and troubleshooting with at least one EDR/XDR platform is mandatory.
• Solid understanding of networking fundamentals, Active Directory (ADDS), and Windows/Linux/macOS administration.
• Familiarity with virtualization technologies (Type 1 and Type 2 hypervisors) and basic cloud concepts.
• Exposure to SIEM, NDR, or OT Security solutions will be an added advantage.
• Strong networking and cybersecurity fundamentals.
• Excellent communication, presentation, and customer-facing skills.
• Willingness to travel for customer meetings, POCs, and implementations.

Preferred Certifications

      Certified Ethical Hacker (CEH) or equivalent security certification.

      Relevant vendor certifications in endpoint security, EDR/XDR.

Any networking certification (CCNA or equivalent) is a plus.

Interview process - Virtual + Face to Face

Job Title : L2 Operations Lead – Malware Tools

Experience : 10+ Years

Location : Gurugram

Work Mode : Hybrid – 2 Days in Office

Employment Type : Full-Time

Engagement Duration : 6+ Months

Number of Positions : 1

Support Level : L2 Operations

Domain : Endpoint Security & Malware Protection

About the Role :

We are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.

The role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.

Mandatory Skills :

CrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.

Key Responsibilities :

• Manage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.
• Monitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.
• Administer and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.
• Investigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.
• Troubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.
• Install, configure, update, and maintain antivirus and endpoint protection solutions across servers.
• Manage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.
• Escalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.
• Maintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.
• Participate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.
• Develop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.
• Analyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.
• Collaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.
• Ensure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).
• Provide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.

Required Technical Skills :

• Endpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.
• CrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.
• Microsoft Defender : Knowledge of endpoint protection and malware detection capabilities.
• Malware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.
• ITSM : Experience with incident, problem, and change management processes.
• Security Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.
• Operating Systems : Strong knowledge of Windows operating systems and endpoint security administration.
• Scripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.
• Monitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.

Tools & Technologies :

• CrowdStrike Falcon
• Microsoft Defender
• ServiceNow
• Splunk SIEM
• SOAR Platforms
• DataDog
• Antivirus and Endpoint Detection & Response (EDR) Solutions
• Windows Server and Windows Operating Systems
• Python / PowerShell

Required Experience & Qualifications :

• 10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.
• Proven experience supporting endpoint protection and malware security tools in an enterprise environment.
• Hands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.
• Experience troubleshooting endpoint security agents and resolving security incidents.
• Strong understanding of malware investigation, alert triage, threat containment, and escalation procedures.
• Experience working in a 24×7 operational support environment.
• Good understanding of ITSM processes, including incident, problem, and change management.
• Experience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal English communication skills.
• Ability to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.

Preferred Certifications :

• CrowdStrike Falcon Administrator
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• CompTIA Security+

Key Performance Expectations :

• Timely resolution of L2 incidents within defined SLAs.
• Effective investigation and containment of malware and endpoint security threats.
• Reduced recurrence of incidents through RCA and preventive actions.
• Accurate incident documentation and timely escalations.
• Improved endpoint agent health, security coverage, and operational efficiency.
• Compliance with client security standards and operational procedures.

Ideal Candidate Profile :

The ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.