Senior Cloud Engineer
Protera
IndiaremotePosted 1 month ago
Skill Required
CybersecuritySecurity-EngineeringInfosecEndpoint-SecurityNetwork-SecuritySenior-Cloud-EngineerSenior-Cloud-EngineeringSenior-Cloud-Software-EngineerSenior-Cloud-Infrastructure-EngineerSenior-Cloud-Platform-EngineerSenior-Cloud-Systems-EngineerSenior-Engineer-Cloud-and-DevOps-(P)Cloud-EngineerCloud EngineerCloudAWSSOCAzureCloud SecurityGCPEngineeringautomationShell ScriptingObservabilityCryptographysecurityetc.)PythondesignLinuxCiscoDesign PatternsSIEMSAPandFulltime
Key highlights
- Shift Timing- Rotational
- Work mode- Remote, India
- 10+ years of experience required
- No SOC operations or incident response responsibilities
- Rotational shift timing
- Remote work from India
Role overview
We are seeking a Cyber Security Engineer with 10+ years of experience and strong expertise in endpoint security architecture, EDR, NDR, DLP, File Integrity Monitoring (FIM), and enterprise endpoint security controls. This role focuses exclusively on design, deployment, configuration, tuning, and long-term maintenance of security platforms. No SOC operations, threat detection, or incident response responsibilities.
Responsibilities
- Design, deploy, configure, and maintain enterprise endpoint security platforms, including EDR/EPP solutions (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, Symantec) and endpoint security controls (AV, host firewall, device control, disk encryption, vulnerability agents).
- Develop endpoint security configuration baselines and ensure consistent policy enforcement across Windows, macOS, and Linux devices.
- Manage agent deployment, health monitoring, policy tuning, updates, and lifecycle maintenance using tools such as Intune, SCCM, GPO, or automation scripts.
- Integrate endpoint telemetry with other security platforms for visibility.
- Design, deploy, and maintain enterprise-wide DLP solutions such as Microsoft Purview DLP (endpoint, cloud, email), Forcepoint DLP, Proofpoint Information & Email Protection, Zscaler / Cisco Umbrella DLP.
- Configure DLP policies, detection classifiers, endpoint rules, cloud controls, and data-handling workflows.
- Manage DLP agents, infrastructure components, tuning, upgrades, and operational alignment with compliance/regulatory requirements.
- Architect, deploy, configure, and maintain NDR solutions such as Corelight, Darktrace, ExtraHop Reveal.
- Configure SPAN/TAP feeds, cloud sensors, routing integrations, and traffic ingestion pipelines.
- Maintain sensor coverage, policy configurations, version upgrades, and performance optimization for NDR platforms.
- Implement and manage FIM platforms, including Tripwire, Qualys FIM, Wazuh, Defender, and CrowdStrike.
- Configure monitored directories, change detection rules, baselines, and exclusions for FIM.
- Oversee FIM agent deployment, architecture, health, and maintenance across server and endpoint fleets.
- Automate deployment, configuration updates, and system health checks using PowerShell, Python, Bash, and API/Graph API.
- Perform ongoing platform operations such as patching, upgrading, tuning, and configuration auditing.
- Maintain complete and up-to-date documentation including architecture diagrams, deployment methodology, standard operating procedures, version control, and lifecycle plans.
Requirements
- 10+ years of experience as a Cyber Security Engineer.
- Hands-on experience with multiple EDR platforms (MDE, CrowdStrike, SentinelOne, etc.).
- Strong understanding of enterprise DLP platforms (Microsoft Purview, Forcepoint, Symantec, Trellix, Netskope, etc.).
- Knowledge of NDR tools (Corelight, Vectra, ExtraHop, Darktrace).
- Experience with FIM solutions (Tripwire, Qualys, OSSEC/Wazuh, EDR-based FIM).
- Strong knowledge of endpoint internals (Windows, macOS, Linux), registry, services, event logs, and system processes.
- Experience with large-scale agent deployment and endpoint configuration management.
- Solid understanding of network fundamentals (SPAN/TAP, packet metadata, routing visibility).
- Scripting skills for automation (PowerShell required; Python/Bash a plus).
Nice to have
- Experience integrating endpoint, DLP, or NDR telemetry with SIEM tools.
- Cloud security fundamentals (Azure, AWS, GCP).
- Certifications: Security+, CySA+, GCED, SC-200, SC-300, SC-400, MS-500, CISSP.
Benefits
- Work from Home set-up.
- Comprehensive medical benefits.
- Gratuity, PF, EPS and Bonus, NPS.
- Shift Allowances.
- On-call Allowance.
- Health and wellness Allowances.
- Learning and Development Allowances.
- No question asked certification policy.
- Certification Bounty Bonus.
Additional details
- Job Title: Cyber Security Engineer.
- Shift Timing: Rotational.
- Work mode: Remote, India.
- Protera is proud to be an equal opportunity employer committed to diversity and inclusion.
- Originally posted on Himalayas.