Lead/ L3- Engineer Support & Implementation Cyber Security

Cybersecurity Support & Implementation Lead/L3

About the Role

We are looking for an experienced Cybersecurity Support & Implementation L3 to strengthen our
Cybersecurity operations, security monitoring, incident response, endpoint protection, and security governance.
The ideal candidate will have 8+ years of experience in cybersecurity, with hands-on expertise in
SOC operations, endpoint security, threat detection, incident management, cloud security, Email
security, Network Security, DLP, vulnerability management, and security frameworks.

Key Responsibilities

Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.
Establish and improve Security Incident Response, Threat Detection, and Threat Intelligence capabilities.
Manage endpoint security, EDR/XDR, NG-AV, vulnerability management, patch management,
and security hardening.
Monitor and respond to cyber threats including ransomware, phishing, malware, credential
attacks, insider threats, and advanced persistent threats.
Implement and manage SIEM, SOAR, EDR, vulnerability management, and other security
technologies.
Design and implement SASE (Secure Access Service Edge) architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.
Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation, and perimeter defense.
Implement micro-segmentation strategies to reduce lateral movement risks across data centers, cloud, and hybrid environments.
Oversee email security solutions, including anti-phishing, anti-spam, DMARC/DKIM/SPF enforcement, and advanced threat protection.
Lead email security implementation and migration projects, including transition from
legacy gateways to modern cloud-based email security platforms.
Implement and manage Data Security Posture Management (DSPM) solutions to discover,
classify, and protect sensitive data across cloud and SaaS environments.
Implement and govern Data Loss Prevention (DLP) solutions across endpoints, email, cloud,
and network channels.
Conduct security assessments, vulnerability assessments, risk assessments, and security audits.
Strengthen security controls across cloud, network, servers, endpoints, applications, and data layers.
Define and maintain cybersecurity policies, procedures, incident-response playbooks, and
operational runbooks.
Ensure compliance with applicable cybersecurity regulations, standards, and frameworks.
Work closely with IT, engineering, product, DevOps, infrastructure, and management teams to
embed security into technology and product development.
Lead cybersecurity incident investigations, root-cause analysis, containment, eradication, and
recovery.

Establish cybersecurity KPIs, dashboards, risk reports, and management-level security
reporting.
Manage relationships with MSSPs, security vendors, auditors, and external cybersecurity
partners.
Conduct security awareness and incident-response training for employees and relevant
stakeholders.
Continuously evaluate emerging cyber threats, technologies, vulnerabilities, and attack
techniques and recommend appropriate countermeasures.

Required Experience & Skills

8+ years of overall IT/cybersecurity experience.
Strong experience managing SOC / Security Operations.
Strong understanding of SIEM, SOAR, EDR/XDR, endpoint security, network security, vulnerability management, and incident response.
Hands-on experience with SASE, email security platforms, DLP, DSPM, and microsegmentation technologies.
Experience in email security implementation and migration projects (on-prem to cloud or legacy to modern platforms).
Strong understanding of cybersecurity frameworks, policies, risk management, and compliance.
Strong understanding of Windows/Linux security and enterprise infrastructure.
Experience with cloud security, preferably AWS/Azure. Strong understanding of networking, firewalls, VPNs, IDS/IPS, IAM, DLP, email security, and security monitoring.
Experience with threat intelligence, malware analysis, forensic investigation, and security
incident management.

Understanding of IoT/OT/connected-device security is desirable.
Strong analytical, problem-solving, communication, and stakeholder-management skills.
Ability to lead cybersecurity teams and manage external security partners.
Preferred Certifications
CISM
CEH
CompTIA Security+
ITIL
AWS/Azure Security certifications
OEM Certifications

Education
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.

Key Success Metrics

SOC monitoring and incident-response effectiveness.
Endpoint, network, and data security posture improvement.
Successful implementation of EDR/ XDR, SASE, micro-segmentation, DSPM, and DLP
controls.
Email security effectiveness and successful migration execution.

Vulnerability remediation and patch compliance.
Cybersecurity audit and regulatory compliance.
Implementation of Security-by-Design across technology and engineering teams.
Improvement in organizational cyber resilience and security awareness.
Location: Andheri East, Mumbai
Working- Work from Office