Infrastructure Security Analyst

Job Title:

Location

Company Description:

ISECURION is a Cert-In Empaneled and ISO 27001:2022 Certified information security consulting company based in Bangalore. We offer innovative and research-driven information security services to our clients. Our business-oriented approach helps us cater to our client's security requirements based on their specific business types and processes.

Are you a seasoned sales professional with a passion for cybersecurity? Join our team in Mumbai and Bengaluru and play a crucial role in driving the success of our Cyber Security Solutions.

Job Summary:

The IT Security Engineer will be responsible for managing and securing enterprise endpoints, performing patch and vulnerability management, conducting internal security assessments, and supporting audit and compliance activities. This role requires hands-on expertise in endpoint protection tools, vulnerability scanning, penetration testing, and threat mitigation.

Key Responsibilities:

• Deploy, test, and manage Windows, Mac, and Linux OS patches and third-party updates using ManageEngine or equivalent tools.
• Troubleshoot failed patch installations and resolve related system-level issues.
• Monitor inbound email traffic to detect, analyze, and mitigate spam or phishing threats.
• Investigate and respond to malware, phishing, and endpoint security incidents.
• Manage application whitelisting and blacklisting as per organizational security policies using Trend Micro or similar endpoint protection solutions.
• Regularly update antivirus templates and endpoint protection policies based on the latest threat intelligence.
• Conduct vulnerability scanning of internal and external infrastructure, servers, and endpoints using tools such as Nessus, Nmap, SSLScan, Metasploit, and Kali Linux utilities.
• Perform web application penetration testing using tools like Burp Suite, Dirb, WPScan, and Amass.
• Analyse, prioritize, and remediate vulnerabilities identified during VAPT (Vulnerability Assessment and Penetration Testing) activities.
• Maintain and update an accurate IT asset inventory for patch management and security monitoring.
• Document and maintain records of system configurations, security policies, and patch schedules.
• Prepare and provide audit evidence and reports to support internal and external audit requirements.
• Conduct internal security reviews, phishing simulations, and cybersecurity awareness sessions for employees.

Required Skills & Qualifications:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
• 1+ years of experience in IT Security, Endpoint Management, or Vulnerability Management.
• Hands-on experience with ManageEngine, Trend Micro, Nessus, Nmap, Burp Suite, and similar tools.
• Strong understanding of patch management, VAPT methodologies, and incident response.
• Good knowledge of Windows, Linux, and Mac OS environments.
• Excellent troubleshooting, analytical, and documentation skills.
• Certifications such as CEH, Security+, or CompTIA CySA+ would be an added advantage.

Key Attributes:

• Strong problem-solving skills and attention to detail.
• Ability to work independently and in a team environment.
• Good communication and reporting skills.
• Proactive in identifying and mitigating potential security risks.

How to Apply: