Cyber Security Engineer (Hybrid)

Overview

Kaplan International is expanding its Security Operations team to meet increasing cyber threats as part of a multi-year digital transformation programme. This hybrid Cyber Security Engineer role supports endpoint protection, cloud and M365 security, vulnerability management and incident triage.

What you'll do

• Monitor and support Microsoft Defender XDR, Defender for Endpoint and Intune for endpoint protection and device compliance.
• Assist with security monitoring and configuration reviews across AWS, Azure and Microsoft 365.
• Support vulnerability management across endpoints, cloud infrastructure and applications using Qualys, Snyk, Orca Security and Microsoft Defender Vulnerability Management, including scanning, reviewing findings, remediation tracking and reporting.
• Assist with application security testing, OWASP Top 10 reviews and DevSecOps security activities.
• Monitor Microsoft 365 and Entra ID security alerts, suspicious sign-ins and identity risks.
• Investigate and triage security alerts, escalating complex incidents to senior engineers.
• Support endpoint hardening, patching, vulnerability remediation and security compliance.
• Assist with security reporting, documentation and automation using PowerShell or Python.
• Collaborate with Infrastructure, Cloud and Development teams to resolve security issues.
• Support security monitoring and assessments of AI applications and services, including Microsoft Copilot, focusing on data protection, access controls and emerging AI-related threats.

What you'll need

• 2-3 years of experience in cyber security, IT infrastructure or technical support.
• Knowledge of Microsoft Defender, Intune, Azure, AWS and M365.
• Awareness of vulnerability management and tools such as Qualys, Orca and Snyk.
• Basic understanding of application security, OWASP Top 10 and secure development practices.
• Understanding of networking, Windows security, identity management and cloud fundamentals.
• Familiarity with security alerts, incident response and vulnerability remediation.
• Basic scripting knowledge in PowerShell or Python.
• Strong analytical skills, willingness to learn and ability to work collaboratively.
• Expertise across the whole IT security spectrum (Software, Servers, Infrastructure, Networks).
• Strong IT Security knowledge, and ability to balance business objectives with information security best practices.
• Documenting security incidents, their analysis, and remediation measures, and providing regular updates and reports.
• Advanced scripting and automation experience.
• Identifying, prioritizing, and managing vulnerabilities in systems and applications.
• Strong understanding of vulnerability management, EDR, XDR, DLP, SOC management tooling and other security tools.
• Experience of securing o365 and configuration of Microsoft security tools.
• Working knowledge of public cloud security and protecting SaaS solutions.
• An inquiring mind, can-do, positive attitude, and initiative-taking approach.
• Good organisational and planning skills, and the ability to make decisions independently.

Nice to have

• Certifications: CompTIA Security+, SC-900, AZ-900 or AWS Cloud Practitioner.

Details

• Location: Bangalore, KA, India.
• Work mode: Hybrid.
• Employee type: Employee.