{"id":3187378,"url":"https://alion.io/job/neogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools","title":"L2 Operations Lead – Malware Tools","company":{"id":3798318,"name":"NeoGenCode Technologies Pvt Ltd","domain":"neogencode.com","url":"https://alion.io/company/neogencode-technologies-pvt-ltd","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Operations","role_family":"Operations","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":1000000,"max":1800000,"currency":"INR","period":"year","gross":true,"usd_annual":19024},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Datadog","optional":false},{"name":"DLP","optional":false},{"name":"Incident Management","optional":false},{"name":"ITSM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-23T10:38:30Z","employer_posted_date":null,"last_verified_at":"2026-10-23T10:38:30Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Title : L2 Operations Lead – Malware Tools\nExperience : 10+ Years\nLocation : Gurugram\nWork Mode : Hybrid – 2 Days in Office\nEmployment Type : Full-Time\nEngagement Duration : 6+ Months\nNumber of Positions : 1\nSupport Level : L2 Operations\nDomain : Endpoint Security & Malware Protection\n\nAbout the Role :\nWe are looking for an experienced L2 Operations Lead – Malware Tools to manage and support enterprise endpoint protection and malware security platforms, with a primary focus on CrowdStrike. The ideal candidate will have strong expertise in endpoint detection and response (EDR), malware investigation, incident management, and endpoint security operations.\nThe role involves monitoring security platforms in a 24×7×365 support environment, resolving Level 2 incidents, troubleshooting endpoint security agents, and escalating complex issues to L3 teams when required. The candidate will also collaborate with cross-functional security and infrastructure teams to maintain effective endpoint protection and minimize recurring incidents.\n\nMandatory Skills :\nCrowdStrike Falcon, EDR, Endpoint Security, Malware Detection & Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, SIEM/SOAR (Splunk), Windows Server, Incident Management, 24×7 Operations Support, and Python/PowerShell Scripting.\n\nKey Responsibilities :\nManage end-to-end security incident handling, from L1/L1.5 escalation through investigation, resolution, and closure.\nMonitor and support endpoint protection and malware security platforms in a 24×7×365 operational environment.\nAdminister and maintain CrowdStrike Falcon and other endpoint detection and response (EDR) solutions.\nInvestigate malware alerts, perform alert triage, assess risks, and implement appropriate containment and remediation actions.\nTroubleshoot endpoint security agent issues, including installation, deployment, connectivity, health monitoring, and performance.\nInstall, configure, update, and maintain antivirus and endpoint protection solutions across servers.\nManage endpoint security consoles, agent updates, patching, platform upgrades, and configuration changes.\nEscalate complex incidents to L3 teams with detailed investigation findings, impact assessments, and recommended actions.\nMaintain accurate and up-to-date incident records in ServiceNow, including investigation details, resolution steps, and closure notes.\nParticipate in Root Cause Analysis (RCA) reviews and implement corrective and preventive measures.\nDevelop and maintain Standard Operating Procedures (SOPs), troubleshooting guides, and knowledge-base articles.\nAnalyze incident trends and recurring alerts to improve detection effectiveness and reduce repeated incidents.\nCollaborate with DLP, Hosting, Network Security, Identity and Access Management (IDAM), and other infrastructure teams to resolve cross-functional issues.\nEnsure compliance with client security policies, operational procedures, and established service-level agreements (SLAs).\nProvide clear incident updates, communicate security risks promptly, and recommend appropriate mitigation measures.\n\nRequired Technical Skills :\nEndpoint Security & EDR : Strong hands-on experience with endpoint protection, antivirus, and EDR technologies.\nCrowdStrike Falcon : Experience in administration, monitoring, policy management, alert investigation, and agent troubleshooting.\nMicrosoft Defender : Knowledge of endpoint protection and malware detection capabilities.\nMalware Investigation : Expertise in alert triage, threat analysis, risk assessment, containment, and remediation.\nITSM : Experience with incident, problem, and change management processes.\nSecurity Monitoring : Familiarity with SIEM/SOAR platforms and security event analysis.\nOperating Systems : Strong knowledge of Windows operating systems and endpoint security administration.\nScripting : Basic to intermediate scripting knowledge in Python or PowerShell for troubleshooting and operational automation.\nMonitoring Tools : Familiarity with Splunk, DataDog, and related monitoring or security operations tools.\n\nTools & Technologies :\nCrowdStrike Falcon\nMicrosoft Defender\nServiceNow\nSplunk SIEM\nSOAR Platforms\nDataDog\nAntivirus and Endpoint Detection & Response (EDR) Solutions\nWindows Server and Windows Operating Systems\nPython / PowerShell\n\nRequired Experience & Qualifications :\n10+ years of overall experience in IT operations, endpoint security, or related security operations functions, with strong hands-on L2 endpoint security experience.\nProven experience supporting endpoint protection and malware security tools in an enterprise environment.\nHands-on experience with CrowdStrike Falcon or other enterprise EDR solutions.\nExperience troubleshooting endpoint security agents and resolving security incidents.\nStrong understanding of malware investigation, alert triage, threat containment, and escalation procedures.\nExperience working in a 24×7 operational support environment.\nGood understanding of ITSM processes, including incident, problem, and change management.\nExperience maintaining operational documentation, SOPs, RCA reports, and knowledge-base articles.\nStrong analytical, troubleshooting, and problem-solving skills.\nExcellent written and verbal English communication skills.\nAbility to coordinate effectively with L1, L3, and cross-functional infrastructure and security teams.\n\nPreferred Certifications :\nCrowdStrike Falcon Administrator\nMicrosoft Certified: Security Operations Analyst Associate (SC-200)\nCompTIA Security+\n\nKey Performance Expectations :\nTimely resolution of L2 incidents within defined SLAs.\nEffective investigation and containment of malware and endpoint security threats.\nReduced recurrence of incidents through RCA and preventive actions.\nAccurate incident documentation and timely escalations.\nImproved endpoint agent health, security coverage, and operational efficiency.\nCompliance with client security standards and operational procedures.\n\nIdeal Candidate Profile :\nThe ideal candidate is a hands-on endpoint security professional with extensive L2 operations experience, strong CrowdStrike or EDR expertise, and the ability to independently manage security incidents in an enterprise environment. The candidate should demonstrate sound troubleshooting skills, effective incident coordination, and a proactive approach to improving security operations.\nSkills\nCrowdStrike Falcon, Endpoint detection and response, Endpoint Security, Malware Detection, Malware Investigation, Alert Triage, Threat Containment, Microsoft Defender, ServiceNow, Security Information and Event Management (SIEM), Splunk, Microsoft Windows Server, Incident management, Operations support system, Powershell","description_format":"text","description_chars":6716,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development","AI Consulting & Integration","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-10-24T00:22:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":19024,"is_top_pay":false},"html_url":"https://alion.io/job/neogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools","json_url":"https://alion.io/job/neogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools.json","meta":{"generated_at":"2026-10-25T22:30:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31817,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3798318},"rest":"https://alion.io/mcp/rest/get_company?id=3798318"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fneogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fneogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fneogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/neogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fneogencode-technologies-pvt-ltd-l2-operations-lead-malware-tools"}]}