L3 Cyber Security Support & Implementation Lead

About the Role :

We are looking for an experienced Cybersecurity Support & Implementation L3 to strengthen our cybersecurity operations, security monitoring, incident response, endpoint protection, and security governance.

The ideal candidate will have 8+ years of experience in cybersecurity, with hands-on expertise in SOC operations, endpoint security, threat detection, incident management, cloud security, Email security, Network Security, DLP, vulnerability management, and security frameworks.

Key Responsibilities :

- Develop and implement cybersecurity strategies aligned with business objectives and risk requirements.

- Establish and improve Security Incident Response, Threat Detection, and Threat Intelligence capabilities.

- Manage endpoint security, EDR/XDR, NG-AV, vulnerability management, patch management, and security hardening.

- Monitor and respond to cyber threats including ransomware, phishing, malware, credential attacks, insider threats, and advanced persistent threats.

- Implement and manage SIEM, SOAR, EDR, vulnerability management, and other security technologies.

- Design and implement SASE (Secure Access Service Edge) architecture including secure web gateway, CASB, ZTNA, and cloud-delivered security controls.

- Manage and strengthen network security, including firewalls, IDS/IPS, VPNs, secure routing, segmentation, and perimeter defense.

- Implement micro-segmentation strategies to reduce lateral movement risks across data centers, cloud, and hybrid environments.

- Oversee email security solutions, including anti-phishing, anti-spam, DMARC/DKIM/SPF enforcement, and advanced threat protection.

- Lead email security implementation and migration projects, including transition from legacy gateways to modern cloud-based email security platforms.

- Implement and manage Data Security Posture Management (DSPM) solutions to discover, classify, and protect sensitive data across cloud and SaaS environments.

- Implement and govern Data Loss Prevention (DLP) solutions across endpoints, email, cloud, and network channels.

- Conduct security assessments, vulnerability assessments, risk assessments, and security audits.

- Strengthen security controls across cloud, network, servers, endpoints, applications, and data layers.

- Define and maintain cybersecurity policies, procedures, incident-response playbooks, and operational runbooks.

- Ensure compliance with applicable cybersecurity regulations, standards, and frameworks.

- Work closely with IT, engineering, product, DevOps, infrastructure, and management teams to embed security into technology and product development.

- Lead cybersecurity incident investigations, root-cause analysis, containment, eradication, and recovery.

- Establish cybersecurity KPIs, dashboards, risk reports, and management-level security reporting.

- Manage relationships with MSSPs, security vendors, auditors, and external cybersecurity partners.

- Conduct security awareness and incident-response training for employees and relevant stakeholders.

- Continuously evaluate emerging cyber threats, technologies, vulnerabilities, and attack techniques and recommend appropriate countermeasures.

Required Experience & Skills :

- 8+ years of overall IT/cybersecurity experience.

- Strong experience managing SOC / Security Operations.

- Strong understanding of SIEM, SOAR, EDR/XDR, endpoint security, network security, vulnerability management, and incident response.

- Hands-on experience with SASE, email security platforms, DLP, DSPM, and microsegmentation technologies.

- Experience in email security implementation and migration projects (on-prem to cloud or legacy to modern platforms).

- Strong understanding of cybersecurity frameworks, policies, risk management, and compliance.

- Strong understanding of Windows/Linux security and enterprise infrastructure.

- Experience with cloud security, preferably AWS/Azure.

- Strong understanding of networking, firewalls, VPNs, IDS/IPS, IAM, DLP, email security, and security monitoring.

- Experience with threat intelligence, malware analysis, forensic investigation, and security incident management.

- Understanding of IoT/OT/connected-device security is desirable.

- Strong analytical, problem-solving, communication, and stakeholder-management skills.

- Ability to lead cybersecurity teams and manage external security partners.

Preferred Certifications :

- CISM

- CEH

- CompTIA Security+

- ITIL

- AWS/Azure Security certifications

- OEM Certifications

Key Success Metrics :

- SOC monitoring and incident-response effectiveness.

- Endpoint, network, and data security posture improvement.

- Successful implementation of EDR/ XDR, SASE, micro-segmentation, DSPM, and DLP controls.

- Email security effectiveness and successful migration execution.

- Vulnerability remediation and patch compliance.

- Cybersecurity audit and regulatory compliance.

- Implementation of Security-by-Design across technology and engineering teams.

- Improvement in organizational cyber resilience and security awareness.

Skills

Security, SoC, SIEM, SOAR, DLP, Vulnerability Management, Cloud Security, Incident Management, Endpoint Detection & Response, Cyber Security, ITIL