Information Technology Security Engineer

IT Security Engineer
Experience: 7+ years
Employment Type: Full-time
Location: Bangalore
Notice Period: Immediate to 30 days
Role Overview
We are looking for a hands-on IT Security Engineer to strengthen and manage security across our Microsoft 365 environment, endpoints, infrastructure, and identity systems.
The ideal candidate will have strong experience across Microsoft 365 security, Entra ID, endpoint security, infrastructure hardening, identity and access management, vulnerability management, and security monitoring. This is a hands-on engineering role and is best suited for candidates who have worked across both Microsoft administration and infrastructure security, rather than profiles focused solely on SOC monitoring.
Key ResponsibilitiesMicrosoft 365 & Cloud Security
Administer and secure Microsoft 365 environments, including Exchange Online, Teams, SharePoint, and OneDrive.
Manage Microsoft Entra ID (Azure AD), Conditional Access, MFA, and identity security controls.
Configure and manage Microsoft Defender for Endpoint and Microsoft Defender for Office 365.
Identify and remediate security risks across the M365 environment.
Endpoint Security
Manage security for Windows, Linux, macOS, and mobile endpoints.
Deploy and manage EDR/XDR solutions such as Microsoft Defender, CrowdStrike, or SentinelOne.
Implement endpoint compliance, encryption, patching, and security baselines.
Manage technologies such as BitLocker and Microsoft Intune.
Identity & Access Management
Manage employee onboarding, role changes, and offboarding from a security and access perspective.
Administer Active Directory and Entra ID provisioning and access controls.
Implement and maintain RBAC, privileged access, MFA, and access review processes.
Ensure appropriate access based on roles and business requirements.
Infrastructure Security
Harden and secure Windows and Linux servers.
Support security configuration and administration of firewalls, VPNs, DNS, and network infrastructure.
Conduct vulnerability assessments and coordinate remediation of identified vulnerabilities.
Maintain security baselines and ensure timely remediation of security gaps.
Security Monitoring & Incident Response
Investigate and respond to security alerts across endpoints, identity, infrastructure, and M365.
Work with SIEM platforms such as Microsoft Sentinel, Splunk, or QRadar.
Analyze logs from Active Directory, Defender, VPN, firewall, and other security systems.
Support incident investigation, root-cause analysis, and remediation.
Compliance & Security Governance
Support ISO 27001 and SOC 2 audits and evidence collection.
Implement and maintain security policies, controls, and procedures.
Support vulnerability management, risk assessments, and security improvement initiatives.
Ensure security controls are consistently implemented across the organization.
Core Required Skills
Microsoft 365 Administration & Security
Microsoft Entra ID / Azure AD
Microsoft Defender for Endpoint & Office 365
Microsoft Intune
Active Directory & Group Policy (GPO)
Windows & Linux Server Security
SIEM & Security Log Analysis
Vulnerability Management
Endpoint Security / EDR
Identity & Access Management
Security Incident Investigation
Preferred Certifications
Microsoft SC-900 / SC-200 / SC-300
MD-102
CompTIA Security+
CEH
CISSP / CISM
ISO 27001 Lead Implementer / Lead Auditor
What We're Looking For
7+ years of hands-on experience in IT security, infrastructure security, and Microsoft environments.
Strong practical experience administering and securing M365, Entra ID, endpoints, and infrastructure.
Ability to independently investigate security issues and drive remediation.
Strong understanding of identity, access management, endpoint security, vulnerability management, and security monitoring.
Experience supporting security audits and compliance requirements.
Important Fitment Note
This role is best suited for candidates with combined Microsoft 365 administration + infrastructure security + endpoint/identity security experience.
Candidates with only SOC monitoring, alert triage, or L1/L2 security operations experience without hands-on infrastructure and Microsoft security administration experience may not be the right fit.

Work arrangement
Hybrid