Information Technology Security Engineer

IT Security Engineer

Experience: 7+ years

Employment Type: Full-time

Location: Bangalore

Notice Period: Immediate to 30 days

Role Overview

We are looking for a hands-on IT Security Engineer to strengthen and manage security across our Microsoft 365 environment, endpoints, infrastructure, and identity systems.

The ideal candidate will have strong experience across Microsoft 365 security, Entra ID, endpoint security, infrastructure hardening, identity and access management, vulnerability management, and security monitoring. This is a hands-on engineering role and is best suited for candidates who have worked across both Microsoft administration and infrastructure security, rather than profiles focused solely on SOC monitoring.

Key ResponsibilitiesMicrosoft 365 & Cloud Security

• Administer and secure Microsoft 365 environments, including Exchange Online, Teams, SharePoint, and OneDrive.
• Manage Microsoft Entra ID (Azure AD), Conditional Access, MFA, and identity security controls.
• Configure and manage Microsoft Defender for Endpoint and Microsoft Defender for Office 365.
• Identify and remediate security risks across the M365 environment.

Endpoint Security

• Manage security for Windows, Linux, macOS, and mobile endpoints.
• Deploy and manage EDR/XDR solutions such as Microsoft Defender, CrowdStrike, or SentinelOne.
• Implement endpoint compliance, encryption, patching, and security baselines.
• Manage technologies such as BitLocker and Microsoft Intune.

Identity & Access Management

• Manage employee onboarding, role changes, and offboarding from a security and access perspective.
• Administer Active Directory and Entra ID provisioning and access controls.
• Implement and maintain RBAC, privileged access, MFA, and access review processes.
• Ensure appropriate access based on roles and business requirements.

Infrastructure Security

• Harden and secure Windows and Linux servers.
• Support security configuration and administration of firewalls, VPNs, DNS, and network infrastructure.
• Conduct vulnerability assessments and coordinate remediation of identified vulnerabilities.
• Maintain security baselines and ensure timely remediation of security gaps.

Security Monitoring & Incident Response

• Investigate and respond to security alerts across endpoints, identity, infrastructure, and M365.
• Work with SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar.
• Analyze logs from Active Directory, Defender, VPN, firewall, and other security systems.
• Support incident investigation, root-cause analysis, and remediation.

Compliance & Security Governance

• Support ISO 27001 and SOC 2 audits and evidence collection.
• Implement and maintain security policies, controls, and procedures.
• Support vulnerability management, risk assessments, and security improvement initiatives.
• Ensure security controls are consistently implemented across the organization.

Core Required Skills

• Microsoft 365 Administration & Security
• Microsoft Entra ID / Azure AD
• Microsoft Defender for Endpoint & Office 365
• Microsoft Intune
• Active Directory & Group Policy (GPO)
• Windows & Linux Server Security
• SIEM & Security Log Analysis
• Vulnerability Management
• Endpoint Security / EDR
• Identity & Access Management
• Security Incident Investigation

Preferred Certifications

• Microsoft SC-900 / SC-200 / SC-300
• MD-102
• CompTIA Security+
• CEH
• CISSP / CISM
• ISO 27001 Lead Implementer / Lead Auditor

What We're Looking For

• 7+ years of hands-on experience in IT security, infrastructure security, and Microsoft environments.
• Strong practical experience administering and securing M365, Entra ID, endpoints, and infrastructure.
• Ability to independently investigate security issues and drive remediation.
• Strong understanding of identity, access management, endpoint security, vulnerability management, and security monitoring.
• Experience supporting security audits and compliance requirements.

Important Fitment Note

This role is best suited for candidates with combined Microsoft 365 administration + infrastructure security + endpoint/identity security experience.

Candidates with only SOC monitoring, alert triage, or L1/L2 security operations experience without hands-on infrastructure and Microsoft security administration experience may not be the right fit.