Infrastructure Security Associate

Company Description ISECURION is a CERT-In empanelled and ISO 27001:2022 certified cybersecurity consulting company that helps organizations stay secure in a complex digital landscape. The team focuses on strengthening security posture, meeting compliance requirements, and building long-term cyber resilience for businesses. Services include Vulnerability Assessment & Penetration Testing (VAPT), compliance audits, cloud security, DFIR, risk assessments, and managed security services. ISECURION is known for its practical, business-focused approach that goes beyond identifying vulnerabilities to helping clients understand impact, prioritize remediation, and align with industry best practices. The company is driven by a team passionate about cybersecurity, research, innovation, and delivering meaningful security outcomes for clients.

Role Description The IT Security Engineer will be responsible for managing and securing enterprise endpoints, performing patch and vulnerability management, conducting internal security assessments, and supporting audit and compliance activities. This role requires hands-on expertise in endpoint protection tools, vulnerability scanning, penetration testing, and threat mitigation.

Key Responsibilities:

• Deploy, test, and manage Windows, Mac, and Linux OS patches and third-party updates using ManageEngine or equivalent tools.
• Troubleshoot failed patch installations and resolve related system-level issues.
• Monitor inbound email traffic to detect, analyze, and mitigate spam or phishing threats.
• Investigate and respond to malware, phishing, and endpoint security incidents.
• Manage application whitelisting and blacklisting as per organizational security policies using Trend Micro or similar endpoint protection solutions.
• Regularly update antivirus templates and endpoint protection policies based on the latest threat intelligence.
• Conduct vulnerability scanning of internal and external infrastructure, servers, and endpoints using tools such as Nessus, Nmap, SSLScan, Metasploit, and Kali Linux utilities.
• Perform web application penetration testing using tools like Burp Suite, Dirb, WPScan, and Amass.
• Analyse, prioritize, and remediate vulnerabilities identified during VAPT (Vulnerability Assessment and Penetration Testing) activities.
• Maintain and update an accurate IT asset inventory for patch management and security monitoring.
• Document and maintain records of system configurations, security policies, and patch schedules.
• Prepare and provide audit evidence and reports to support internal and external audit requirements.
• Conduct internal security reviews, phishing simulations, and cybersecurity awareness sessions for employees.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 1 to 3 years of experience in IT Security, Endpoint Management, or Vulnerability Management.
• Hands-on experience with ManageEngine, Trend Micro, Nessus, Nmap, Burp Suite, and similar tools.
• Strong understanding of patch management, VAPT methodologies, and incident response.
• Good knowledge of Windows, Linux, and Mac OS environments.
• Excellent troubleshooting, analytical, and documentation skills.
• Certifications such as CEH, Security+, or CompTIA CySA+ would be an added advantage.