DevSecOp Engineer

Requirements

Key Responsibilities

Endpoint, Email & SaaS Protection

Administer Microsoft Defender for Endpoint / Identity / Office / Cloud Apps; maintain Trend Micro Cloud App Security (where applicable).

• Design, deploy, and maintain AV / EPP / EDR and XDR policies (real-time / tamper protection, ASR, ransomware protections).
• Maintain sensor health & coverage; drive remediation for unhealthy / missing agents via Intune / SCCM.

Administer anti-phishing, Safe Links / Attachments, and BEC / impersonation protections tuned for SDP business flows (e.g., tenders, vendor onboarding).

Data Protection

Operate endpoint / M365 DLP (policies, labels, monitoring).

Enforce device encryption (BitLocker), device / USB control, and application control with governed exceptions.

Vulnerability & Patch Operations

Run authenticated scanning across endpoints, servers, and site devices; prioritize via asset criticality and exposure scores (e.g., Secure Score / Defender Exposure Score).

Coordinate remediation SLAs with owners; track through ITSM and verify closure.

Investigations & Digital Forensics

Lead investigations into malware outbreaks, suspicious XDR activity, email / BEC attempts, DLP events, account compromise, policy breaches, and third-party incidents impacting SDP.

Work hand-in-hand with the SOC for containment / eradication, evidence handling, RCA, and post-incident improvements.

Network Security & Access Controls

Operate NAC (802.1X, guest / corporate segmentation); close gaps allowing unmanaged / personal devices.

Partner with IAM / PAM to enforce least privilege, Conditional Access, and compliant-device requirements.

VAPT Program Management

Plan, coordinate, and execute SDP's risk-based VAPT program across internet-facing portals, core business applications (e.g., IFCA), cloud (Azure / M365), network / security controls (NAC / SD-WAN), and selected site / IoT footprints—driving timely remediation and measurable risk reduction.

Scope of Technology coverage

Minimum Qualifications

Certificates (nice to have)