Hybrid Security Engineer I

at Kroll

• Job title: Security Engineer I
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Cloud, Jamf, Linux, MacOS, Python
• Location requirements: Hybrid, Mumbai, India

About the role

• Security Engineer responsible for enterprise endpoint security against evolving cyber threats. Designing, implementing, and maintaining security controls globally.

Responsibilities

• Deploy, configure, and maintain endpoint protection solutions.
• Monitor endpoint health, security alerts, and compliance posture across the environment.
• Tune detection rules, behavioral analytics, and security policies to reduce false positives while strengthening threat coverage.
• Perform regular assessments to validate tool effectiveness and coverage across all asset types.
• Collaborate with other security teams to enhance detection logic and improve response workflows.
• Work closely with the business to ensure secure configurations are continuously enforced.
• Evaluate and implement new endpoint protection technologies and security features.
• Participate in designing endpoint‑related components of the enterprise security architecture.
• Develop automation for deployment, health monitoring, and threat response where possible.
• Ensure endpoint security solutions support regulatory requirements (e.g., ISO 27001, NIST CSF, GDPR).
• Produce reports and dashboards showing endpoint security posture, tool adoption, and risk metrics.
• Contribute to policy and standard development related to endpoint security.

Requirements

• Minimum 3-5 years of experience in Information Security related positions.
• Proven experience in endpoint protection engineering or security operations.
• Strong understanding of Windows, Linux, and macOS internals.
• Familiarity with MITRE ATT&CK, malware behavior, and common intrusion techniques.
• Knowledge of scripting/automation (PowerShell, Python, Bash).
• Ability to analyze logs and telemetry from EDR, SIEM, and OS native tools.
• Strong analytical and problem‑solving mindset.
• Excellent communication skills across technical and non‑technical audiences.
• Ability to work independently and collaboratively in fast‑paced environments.
• Proactive approach to improving processes and security posture.
• Security certifications such as GCIA, GCIH, GCED, CEH, Security+.
• Experience with mobile device management (MDM/UEM) such as Intune or Jamf.
• Experience with Zero Trust and identity‑centric endpoint security architecture.
• Exposure to cloud endpoint security and hybrid identity environments.

Benefits

• Kroll is committed to equal opportunity and diversity, and recruits people based on merit.