L2 Operations Engineer Malware Tools Endpoint Security

L2 Operations Engineer - Malware Tools (Endpoint Security)
Company: Durapid Technologies, hiring for a leading IT services client
Location: Delhi/NCR (candidates must be based in Delhi/NCR or willing to relocate)
Employment type: Contract
Experience: 10+ years
Support model: 24x7 operations
About The Role
We are looking for a senior endpoint security professional to run day-to-day operations for enterprise malware protection tools. You will be the L2 point of ownership for endpoint incidents: investigating alerts, containing threats, keeping the tooling healthy, and handing well-documented cases to L3 when they need deeper work.
Key Responsibilities
Monitor and manage enterprise endpoint security platforms in a 24x7 environment
Investigate, triage and resolve malware and endpoint security incidents
Support and administer CrowdStrike, Microsoft Defender, RSA, Azure Key Vault and phishing security tools
Escalate complex security events to L3 teams with clear, detailed findings
Manage endpoint protection deployments, upgrades and patching
Handle phishing investigations and threat containment
Work closely with DLP, Network Security, Hosting and IDAM teams
Contribute to RCAs, keep SOPs current and tune alerts to cut noise
Technical Skills
CrowdStrike Falcon
Microsoft Defender for Endpoint / Windows Defender
RSA security solutions
SIEM and SOAR tools (Splunk preferred)
Azure Key Vault
Endpoint Detection and Response (EDR)
Malware analysis and incident management
Phishing and email security
Windows administration
Python or PowerShell scripting
ServiceNow
Preferred Certifications
CrowdStrike Falcon Administrator
Microsoft SC-200
CompTIA Security+
What We Are Looking For
Strong hands-on experience in endpoint security operations
Proven ability to investigate and contain malware
Sound incident management and troubleshooting skills
Experience in enterprise SOC or security operations environments
Clear communication and confident stakeholder management
Skills: powershell,crowdstrike falcon,edr,microsoft defender,python,servicenow,azure,splunk,malware analysis,incident response

Work arrangement
No