Cybersecurity Engineer

Job Title: Cyber Security Engineer

Shift Timing- Rotational

Work mode- Remote, India

Role Overview:

We are seeking a Cyber Security Engineer with 10+ years of experience and strong expertise in endpoint security architecture, EDR, NDR, DLP, File Integrity Monitoring (FIM), and enterprise endpoint security controls.

This role focuses exclusively on design, deployment, configuration, tuning, and long-term maintenance of security platforms.
No SOC operations, threat detection, or incident response responsibilities.

Key Responsibilities:

1. Endpoint Security & EDR Engineering

·       Design, deploy, configure, and maintain enterprise endpoint security platforms, including:

o   EDR/EPP solutions: Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Trellix/McAfee, Symantec

o   Endpoint security controls: AV, host firewall, device control, disk encryption, and vulnerability agents

·       Develop endpoint security configuration baselines and ensure consistent policy enforcement across Windows/macOS/Linux devices.

·       Manage agent deployment, health monitoring, policy tuning, updates, and lifecycle maintenance using tools such as Intune, SCCM, GPO, or automation scripts.

·       Integrate endpoint telemetry with other security platforms for visibility             

2. Data Loss Prevention (DLP) – Engineering & Lifecycle Management

·       Design, deploy, and maintain enterprise-wide DLP solutions such as (Microsoft Purview DLP (endpoint, cloud, email), Forcepoint DLP, Proofpoint Information & Email Protection, Zscaler / Cisco Umbrella DLP

·       Configure DLP policies, detection classifiers, endpoint rules, cloud controls, and data-handling workflows.

·       Manage DLP agents, infrastructure components, tuning, upgrades, and operational alignment with compliance/regulatory requirements.

3. Network Detection & Response (NDR) Engineering

·       Architect, deploy, configure, and maintain NDR solutions such as: (Corelight, Darktrace, ExtraHop Reveal)

·       Configure SPAN/TAP feeds, cloud sensors, routing integrations, and traffic ingestion pipelines.

·       Maintain sensor coverage, policy configurations, version upgrades, and performance optimization.

4. File Integrity Monitoring (FIM) – Design, Deployment & Maintenance

·       Implement and manage FIM platforms, including: (Tripwire, Qualys FIM, Wazuh, Defender, CrowdStrike)

·       Configure monitored directories, change detection rules, baselines, and exclusions.

·       Oversee FIM agent deployment, architecture, health, and maintenance across server and endpoint fleets.

5. Automation, Deployment & Platform Operations

·       Automate deployment, configuration updates, and system health checks using:

o   PowerShell, Python, Bash, API/Graph API

·       Perform ongoing platform operations such as patching, upgrading, tuning, and configuration auditing.

·       Maintain complete and up-to-date documentation including:

o   Architecture diagrams

o   Deployment methodology

o   Standard operating procedures

o   Version control and lifecycle plans

Requirements

Required Technical Skills:

·       Hands-on experience with multiple EDR platforms (MDE, CrowdStrike, SentinelOne, etc.).

·       Strong understanding of enterprise DLP platforms (Microsoft Purview + Forcepoint/Symantec/Trellix/Netskope/etc.).

·       Knowledge of NDR tools (Corelight, Vectra, ExtraHop, Darktrace).

·       Experience with FIM solutions (Tripwire, Qualys, OSSEC/Wazuh, EDR-based FIM).

·       Strong knowledge of endpoint internals (Windows, macOS, Linux), registry, services, event logs, and system processes.

·       Experience with large-scale agent deployment and endpoint configuration management.

·       Solid understanding of network fundamentals (SPAN/TAP, packet metadata, routing visibility).

·       Scripting skills for automation (PowerShell required; Python/Bash a plus).

Nice-to-Have Skills:

·       Experience integrating endpoint, DLP, or NDR telemetry with SIEM tools

·       Cloud security fundamentals (Azure, AWS, GCP).

·       Certifications: Security+, CySA+, GCED, SC-200, SC-300, SC-400, MS-500, CISSP

Why Join Protera?

• Work with global enterprise clients
• Learn fast with mentorship, certifications, and career growth
• Make a real impact in a company where ideas are welcome
• Flexible work setup (remote/hybrid)
• People-first culture with a global mindset

Ready to Make the Move?

We’d love to meet you.

Click “Apply Now” and tell us why you’re the one.

Not sure yet? Check us out at www.protera.com or connect with our team on LinkedIn.

Protera is proud to be an equal opportunity employer.
We celebrate diversity and are committed to creating an inclusive environment for all employees.

About Protera

Protera Technologies (www.protera.com) is an SAP Certified, Global Total IT Outsourcing Provider for SAP-centric organizations founded in the mid-1990s. We have been the SAP-on-cloud pioneer since running the world’s first SAP production instance on a public cloud. Today, we manage thousands of SAP and related IT workloads on Microsoft Azure, Google Cloud, and Amazon Web Services (AWS).

Headquartered in Chicago, IL, with offices in Athens, Greece, and Mumbai, India, Protera delivers world-class cloud hosting, application management, and professional services focused on total customer satisfaction.

For more information, visit www.protera.com.

Benefits

• Work from Home set-up  

• Comprehensive medical benefits  

•  Gratuity, PF, EPS and Bonus, NPS  

•  Shift Allowances  

• On-call Allowance  

• Health and wellness Allowances  

• Learning and Development Allowances  

• No question asked certification policy.  

• Certification Bounty Bonus