Information Technology Security Engineer

Location: Pushkar

IT Security Engineer

Experience:

7+ years

Employment Type:

Full-time

Location:

Bangalore
Notice Period:  Immediate to 30 days

Role Overview We are looking for a hands-on  IT Security Engineer  to strengthen and manage security across our Microsoft 365 environment, endpoints, infrastructure, and identity systems.
The ideal candidate will have strong experience across  Microsoft 365 security, Entra , endpoint security, infrastructure hardening, identity and access management, vulnerability management, and security monitoring . This is a hands-on engineering role and is best suited for candidates who have worked across both  Microsoft administration and infrastructure security , rather than profiles focused solely on SOC monitoring.

Key Responsibilities Microsoft 365 & Cloud Security  Administer and secure  Microsoft 365  environments, including Exchange Online, Teams, SharePoint, and One Drive.
Manage  Microsoft Entra  (Azure AD) , Conditional Access, MFA, and identity security controls.
Configure and manage  Microsoft Defender for Endpoint and Microsoft Defender for Office 365 .
Identify and remediate security risks across the M365 environment.
Endpoint Security  Manage security for  Windows, Linux, macOS, and mobile endpoints .
Deploy and manage EDR/XDR solutions such as  Microsoft Defender, Crowd Strike, or Sentinel One .
Implement endpoint compliance, encryption, patching, and security baselines.
Manage technologies such as  Bit Locker and Microsoft Intune .
Identity & Access Management  Manage employee onboarding, role changes, and offboarding from a security and access perspective.
Administer  Active Directory and Entra   provisioning and access controls.
Implement and maintain  RBAC, privileged access, MFA, and access review processes .
Ensure appropriate access based on roles and business requirements.
Infrastructure Security  Harden and secure  Windows and Linux servers .
Support security configuration and administration of  firewalls, VPNs, DNS, and network infrastructure .
Conduct vulnerability assessments and coordinate remediation of identified vulnerabilities.
Maintain security baselines and ensure timely remediation of security gaps.
Security Monitoring & Incident Response  Investigate and respond to security alerts across endpoints, identity, infrastructure, and M365.
Work with  SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar .
Analyze logs from Active Directory, Defender, VPN, firewall, and other security systems.
Support incident investigation, root-cause analysis, and remediation.
Compliance & Security Governance  Support  ISO 27001 and SOC 2  audits and evidence collection.
Implement and maintain security policies, controls, and procedures.
Support vulnerability management, risk assessments, and security improvement initiatives.
Ensure security controls are consistently implemented across the organization.
Core Required Skills  Microsoft 365 Administration & Security
Microsoft Entra  / Azure AD
Microsoft Defender for Endpoint & Office 365
Microsoft Intune
Active Directory & Group Policy (GPO)
Windows & Linux Server Security
SIEM & Security Log Analysis
Vulnerability Management
Endpoint Security / EDR
Identity & Access Management
Security Incident Investigation
Preferred Certifications  Microsoft  SC-900 / SC-200 / SC-300
MD-102
CompTIA Security+
CEH
CISSP / CISM
ISO 27001 Lead Implementer / Lead Auditor
What We're Looking For  7+ years of hands-on experience in  IT security, infrastructure security, and Microsoft environments .
Strong practical experience administering and securing  M365, Entra , endpoints, and infrastructure .
Ability to independently investigate security issues and drive remediation.
Strong understanding of identity, access management, endpoint security, vulnerability management, and security monitoring.
Experience supporting security audits and compliance requirements.
Important Fitment Note This role is best suited for candidates with  combined Microsoft 365 administration + infrastructure security + endpoint/identity security experience .
Candidates with only SOC monitoring, alert triage, or L1/L2 security operations experience without hands-on infrastructure and Microsoft security administration experience may not be the right fit.