Sr. Endpoint_Security_Specialist

Role overview

Sr. Endpoint_Security_Specialist at Zensar

The role involves protecting endpoints, email, and network infrastructure through threat detection, data protection, vulnerability remediation, and incident response.

We are seeking a skilled Sr Endpoint Security Engineer with hands-on experience in Symantec Endpoint Security, Symantec Data Loss Prevention (DLP), Microsoft 365 Email Security, FortiGate Firewalls, Vulnerability Management, EDR, and SIEM operations.

Responsibilities

• Deploy, configure, and manage Symantec Endpoint Security (AV / SEP / SES Complete) across enterprise environments.
• Monitor endpoint threats, malware outbreaks, suspicious behavior, and policy compliance.
• Investigate and remediate endpoint security incidents including malware, ransomware, and insider threats.
• Administer and manage Symantec Data Loss Prevention (DLP) across endpoints, email, and network channels.
• Design, implement, and tune DLP policies for sensitive data protection (PII, financial data, intellectual property).
• Monitor and investigate DLP incidents, perform root cause analysis, and coordinate remediation with business teams.
• Configure detection technologies including policies, dictionaries, EDM/IDM, and fingerprinting techniques.
• Perform DLP policy tuning to reduce false positives and improve detection accuracy.
• Generate DLP reports and support audit/compliance requirements (ISO 27001, GDPR, etc.).
• Manage Endpoint Detection & Response (EDR) activities such as alert investigation, host isolation, file quarantine, and IOC blocking.
• Ensure endpoint agent health, version compliance, and policy tuning to reduce false positives.
• Operate Vulnerability Management tools such as Qualys VMDR for endpoints, servers, and network devices.
• Conduct authenticated vulnerability scans, analyze findings using CVSS, and risk-based prioritization.
• Collaborate with infrastructure and application teams to remediate vulnerabilities and track closure through re-scans.
• Integrate endpoint, email, firewall, EDR, and vulnerability logs with SIEM platforms (e.g., Microsoft Sentinel).
• Monitor SIEM alerts, perform log analysis, correlation, and support threat hunting and incident investigations.
• Administer Microsoft Defender for Office 365 including anti-phishing, anti-spam, antimalware, Safe Links, Safe Attachments, and email authentication (SPF, DKIM, DMARC).
• Investigate email-based threats using Threat Explorer, message trace, and quarantine management.
• Configure, manage, and troubleshoot FortiGate firewalls including policies, NAT, VPNs, IPS, AV, and web filtering.
• Perform firewall rule reviews, optimization, security hardening, and participate in change management.
• Generate security metrics, dashboards, and reports for management, audits, and compliance support.
• Conduct authenticated vulnerability scans, analyze findings using CVSS, and risk-based prioritization.Configure, manage, and troubleshoot FortiGate firewalls including policies, NAT, VPNs, IPS, AV, and web filtering.

Employment details

• Location: India

Additional role details

• Sr_Endpoint_Security_Engineer_JD