System Security Engineer

Job Summary:

We are seeking a System Security Engineer to design, implement, and maintain a secure enterprise environment across on-premises and cloud platforms. The role focuses on deploying security controls, hardening systems, ensuring continuous protection, and proactively defending against evolving threats.

Key Responsibilities:

• Design, implement, and continuously improve security controls across Windows Server and Linux (RHEL/Ubuntu/Debian) environments, including hardening, patching, and configuration management
• Develop and enforce endpoint security policies — managing EDR/EPP solutions, anti-malware tooling, device control, and host-based firewalls across on-premises and cloud-hosted systems
• Own cloud security posture across AWS, Azure, and/or GCP: configure CSPM tools, enforce secure landing zones, manage IAM policies, and remediate misconfigurations
• Lead application security efforts including secure code review, SAST/DAST integration in CI/CD pipelines, container and Kubernetes security, and secrets management
• Deploy, configure, and operationalise SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, Elastic SIEM) — including log source onboarding, data normalisation, correlation rule authoring, and dashboard creation
• Manage and tune SIEM, IDS/IPS, and cloud-native detection services (AWS GuardDuty, Microsoft Defender for Cloud, GCP Security Command Center); investigate alerts, build detection content, and lead incident response
• Deploy, integrate, and maintain the broader security tooling ecosystem — including vulnerability scanners, PAM solutions, EDR/XDR platforms, DLP, NAC, and threat intelligence feeds — ensuring tools are properly licensed, updated, and operationally effective
• Oversee identity and access management — Active Directory, Entra ID / Azure AD, AWS IAM, PAM solutions, MFA enforcement, and least-privilege access reviews including federated identities and service accounts
• Conduct vulnerability assessments, cloud configuration audits, and penetration tests, track findings through to closure with system and platform owners
• Define and maintain security baselines using CIS Benchmarks, CIS Foundations Benchmarks for cloud, and NIST SP 800-53 / CSF; support audit and compliance activities (ISO 27001, SOC 2, GDPR, CSA CCM)
• Evaluate, procure, and integrate security tooling across on-premises and cloud platforms; maintain security architecture documentation and incident runbooks
• Act as a security advisor to engineering and operations teams — providing threat modelling input, training, and security review of infrastructure and cloud architecture changes

Skills Required:

• Strong hands-on expertise in securing Windows and Linux systems
• Experience with cloud security concepts including identity management, secure networking, and workload protection
• Proven experience with patch management, firmware upgrades, and vulnerability remediation
• Working knowledge of enterprise security tools (SIEM, WAF, EDR, etc.)
• Solid understanding of network security, firewalls, and secure architecture principles
• Familiarity with security frameworks and standards (e.g., CIS, NIST, ISO)
• Awareness of current cybersecurity threats, attack techniques, and mitigation strategies
• Scripting/automation skills (PowerShell, Bash, Python, or similar) are a plus

Qualification Required:

• 3 years plus of experience as a System Support Engineer or similar role.
• Bachelors in Computer Science, Information Technology, Software Engineer or similar degree program.

Pay: From Rs100,000.00 per month

Application Question(s):

• What is your current monthly salary?
• What is your expected monthly salary?
• Could you please clarify whether the expected salary you mentioned is Gross Salary or Net Take-Home (Net Transfer) Salary?
• What is your notice period?
• What is your current city of residence?
• Are you willing to work onsite at the specified location?
• Are you comfortable with the required shift timings?

Work Location: In person