Engineer II - Security Engineer | On-Site, Bangalore

We are seeking a highly skilled and motivated Endpoint Security Engineer to join our Managed Security Services (MSS) team in India. In this role, you will be a key member of our elite Endpoint Security team responsible for the co-management and optimization of a diverse portfolio of endpoint security solutions, including Sentinel One, CrowdStrike, Carbon Black, Microsoft Defender for Endpoint, and Palo Alto Cortex. You will play a critical role in ensuring the security posture of our clients by proactively identifying and mitigating threats, responding to security incidents, and continuously improving our endpoint security capabilities. 

How you’ll make an Impact 

• Monitor and analyze endpoint security alerts and incidents from various sources, including SIEM, EDR, and other security tools. 

• Work in conjunction with Threat Analysis (TA) to understand and conduct in-depth investigations of security incidents, including malware analysis, threat hunting, and incident response activities. 

• Implement and maintain endpoint security controls, including host-based intrusion prevention systems (HIPS), anti-malware, and application whitelisting. 

• Develop and maintain custom detection rules and signatures for endpoint security tools. 

• Participate in incident response activities, including containment, eradication, and recovery efforts. 

• Co-manage and optimize the performance and effectiveness of SentinelOne, CrowdStrike, Carbon Black, Microsoft Defender for Endpoint, and Palo Alto Cortex platforms. 

• Develop and maintain endpoint security policies, settings and best practices. 

• Troubleshoot and resolve technical issues related to endpoint security solutions. 

• Perform regular platform upgrades and patches. 

• Ensure compliance with relevant security standards and regulations. 

• Stay abreast of the latest threat intelligence and security advisories. 

• Leverage threat intelligence feeds to improve threat detection and response capabilities. 

• Develop and implement automation scripts to streamline security operations tasks. 

• Integrate endpoint security tools with other security technologies, such as SIEM and SOAR platforms. 

• Communicate technical information effectively to both technical and non-technical audiences. 

• Provide technical guidance and support to clients. 

• Work closely with Customer Success Managers to drive Customer Satisfaction Scores.  

• Build and maintain strong relationships with clients. 

• Collaborate effectively with other members of the MSS team, including security analysts, engineers, CSMs, management and other leaders and cross functional teams. 

• Participate in knowledge sharing and training sessions. 

What we’re looking for

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience. 

• 3+ years of experience in endpoint security operations, including experience with at least two of the following: SentinelOne, CrowdStrike, Carbon Black, Microsoft Defender for Endpoint, and Palo Alto Cortex. 

• Strong understanding of endpoint security concepts, including malware analysis, threat hunting, and incident response. 

• Experience with scripting languages such as Python or PowerShell. 

• Experience with SIEM and SOAR platforms. 

• Experience with Torq for automation of Endpoint operations.  

• Strong analytical and problem-solving skills. 

• Excellent communication and interpersonal skills. 

• Strong work ethic and a passion for cybersecurity. 

• Relevant industry certifications (e.g., Security+, CEH, CISSP) are a plus.

What you can expect from Optiv

• A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv is an equal opportunity employer (EEO). All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities.  For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.