Conduct external network, web application, and API penetration tests, manually exploit and validate vulnerabilities, assess real-world risk, and deliver actionable findings and remediation guidance to clients.
Cybersecurity Engineer
📜 Description
- Design, deploy, configure, tune, and maintain enterprise endpoint security and EDR platforms.
- Manage endpoint security baselines, controls, agent deployment, health, updates, and lifecycle maintenance across Windows, macOS, and Linux.
- Engineer DLP policies, classifiers, endpoint rules, cloud controls, agents, and infrastructure.
- Deploy and maintain NDR sensors, traffic feeds, integrations, and performance configurations.
- Implement and maintain FIM platforms, monitored directories, change detection rules, baselines, and agents.
- Automate platform deployment and health checks; perform upgrades, patching, configuration audits, and technical documentation.
🛠️ Requirements
- Hands-on experience with multiple EDR platforms (MDE, CrowdStrike, SentinelOne, etc.).
- Strong understanding of enterprise DLP platforms (Microsoft Purview + Forcepoint/Symantec/Trellix/Netskope/etc.).
- Knowledge of NDR tools (Corelight, Vectra, ExtraHop, Darktrace).
- Experience with FIM solutions (Tripwire, Qualys, OSSEC/Wazuh, EDR-based FIM).
- Strong knowledge of endpoint internals (Windows, macOS, Linux), registry, services, event logs, and system processes.
- Experience with large-scale agent deployment and endpoint configuration management.
- Solid understanding of network fundamentals (SPAN/TAP, packet metadata, routing visibility).
- Scripting skills for automation (PowerShell required; Python/Bash a plus).
- Work with global enterprise clients
- Learn fast with mentorship, certifications, and career growth
✨ Benefits
- Work from Home set-up
- Comprehensive medical benefits
- Gratuity, PF, EPS and Bonus, NPS
- Shift Allowances
- On-call Allowance
- Health and wellness Allowances
- Learning and Development Allowances
- No question asked certification policy.
Full job description
Job Title: Cyber Security Engineer
Shift Timing- Rotational
Work mode- Remote, India
Role Overview:
We are seeking a Cyber Security Engineer with 10+ years of experience and strong expertise in endpoint security architecture, EDR, NDR, DLP, File Integrity Monitoring (FIM), and enterprise endpoint security controls.
This role focuses exclusively on design, deployment, configuration, tuning, and long-term maintenance of security platforms.
No SOC operations, threat detection, or incident response responsibilities.
Key Responsibilities:
1. Endpoint Security & EDR Engineering
· Design, deploy, configure, and maintain enterprise endpoint security platforms, including:
o EDR/EPP solutions: Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, Symantec
o Endpoint security controls: AV, host firewall, device control, disk encryption, and vulnerability agents
· Develop endpoint security configuration baselines and ensure consistent policy enforcement across Windows/macOS/Linux devices.
· Manage agent deployment, health monitoring, policy tuning, updates, and lifecycle maintenance using tools such as Intune, SCCM, GPO, or automation scripts.
· Integrate endpoint telemetry with other security platforms for visibility
2. Data Loss Prevention (DLP) – Engineering & Lifecycle Management
· Design, deploy, and maintain enterprise-wide DLP solutions such as (Microsoft Purview DLP (endpoint, cloud, email), Forcepoint DLP, Proofpoint Information & Email Protection, Zscaler / Cisco Umbrella DLP
· Configure DLP policies, detection classifiers, endpoint rules, cloud controls, and data-handling workflows.
· Manage DLP agents, infrastructure components, tuning, upgrades, and operational alignment with compliance/regulatory requirements.
3. Network Detection & Response (NDR) Engineering
· Architect, deploy, configure, and maintain NDR solutions such as: (Corelight, Darktrace, ExtraHop Reveal)
· Configure SPAN/TAP feeds, cloud sensors, routing integrations, and traffic ingestion pipelines.
· Maintain sensor coverage, policy configurations, version upgrades, and performance optimization.
4. File Integrity Monitoring (FIM) – Design, Deployment & Maintenance
· Implement and manage FIM platforms, including: (Tripwire, Qualys FIM, Wazuh, Defender, CrowdStrike)
· Configure monitored directories, change detection rules, baselines, and exclusions.
· Oversee FIM agent deployment, architecture, health, and maintenance across server and endpoint fleets.
5. Automation, Deployment & Platform Operations
· Automate deployment, configuration updates, and system health checks using:
o PowerShell, Python, Bash, API/Graph API
· Perform ongoing platform operations such as patching, upgrading, tuning, and configuration auditing.
· Maintain complete and up-to-date documentation including:
o Architecture diagrams
o Deployment methodology
o Standard operating procedures
o Version control and lifecycle plans
Requirements
Required Technical Skills:
· Hands-on experience with multiple EDR platforms (MDE, CrowdStrike, SentinelOne, etc.).
· Strong understanding of enterprise DLP platforms (Microsoft Purview + Forcepoint/Symantec/Trellix/Netskope/etc.).
· Knowledge of NDR tools (Corelight, Vectra, ExtraHop, Darktrace).
· Experience with FIM solutions (Tripwire, Qualys, OSSEC/Wazuh, EDR-based FIM).
· Strong knowledge of endpoint internals (Windows, macOS, Linux), registry, services, event logs, and system processes.
· Experience with large-scale agent deployment and endpoint configuration management.
· Solid understanding of network fundamentals (SPAN/TAP, packet metadata, routing visibility).
· Scripting skills for automation (PowerShell required; Python/Bash a plus).
Nice-to-Have Skills:
· Experience integrating endpoint, DLP, or NDR telemetry with SIEM tools
· Cloud security fundamentals (Azure, AWS, GCP).
· Certifications: Security+, CySA+, GCED, SC-200, SC-300, SC-400, MS-500, CISSP
Why Join Protera?
- Work with global enterprise clients
- Learn fast with mentorship, certifications, and career growth
- Make a real impact in a company where ideas are welcome
- Flexible work setup (remote/hybrid)
- People-first culture with a global mindset
Ready to Make the Move?
We’d love to meet you.
Click “Apply Now” and tell us why you’re the one.
Not sure yet? Check us out at www.protera.com or connect with our team on LinkedIn.
Protera is proud to be an equal opportunity employer.
We celebrate diversity and are committed to creating an inclusive environment for all employees.
About Protera
Protera Technologies (www.protera.com) is an SAP Certified, Global Total IT Outsourcing Provider for SAP-centric organizations founded in the mid-1990s. We have been the SAP-on-cloud pioneer since running the world’s first SAP production instance on a public cloud. Today, we manage thousands of SAP and related IT workloads on Microsoft Azure, Google Cloud, and Amazon Web Services (AWS).
Headquartered in Chicago, IL, with offices in Athens, Greece, and Mumbai, India, Protera delivers world-class cloud hosting, application management, and professional services focused on total customer satisfaction.
For more information, visit www.protera.com.
Benefits
- Work from Home set-up
- Comprehensive medical benefits
- Gratuity, PF, EPS and Bonus, NPS
- Shift Allowances
- On-call Allowance
- Health and wellness Allowances
- Learning and Development Allowances
- No question asked certification policy.
- Certification Bounty Bonus
Similar jobs
Search more Cybersecurity Engineer jobsAnalista de Segurança Telecom SR
Administra e evolui ambientes críticos de segurança e telecomunicações, configurando firewalls, redes e VPNs, monitorando incidentes e executando mudanças com foco em disponibilidade e proteção.
Own and evolve end-to-end security across application, cloud, identity, detection, incident response, and compliance, partnering with engineering and leadership to protect the platform and customer data.
Senior Information Security Engineer
Protect corporate data by operationalizing data loss prevention tools, improving alert fidelity and response processes, and strengthening data protection controls across SaaS environments, especially Google Workspace.
Executes day-to-day information security across corporate IT, platform, and product environments, maintaining ISO 27001 certification and advancing application security, vulnerability management, incident response, and customer compliance.
