Senior Application Security Engineer

Job Description

Job Description: Senior Information Security Engineer (MSS)

Job Title: Senior Information Security Engineer – Managed Security Services (MSS)

Experience Level: 5–8 Years

Shift Timings: 9:30-6:30

Location: Mumbai, India

Employment Type: Full-Time

Primary Tech Stack: Qualys (VMDR), Zscaler (ZIA, ZPA, ZDLP), CyberArk (PAM)

Role Overview

We are seeking an experienced Senior Information Security Engineer with 5 to 8 years of hands-on expertise in Managed Security Services (MSS). In this role, you will be responsible for leading day-to-day operations, monitoring, and management across core enterprise security functions: Vulnerability Management (Qualys), Zero Trust Access & DLP (Zscaler ZIA/ZPA/ZDLP), and Privileged Access Management (CyberArk).

Key Responsibilities by Business Segment

1. Vulnerability Management (Qualys)

• Operational Handover & Setup: Transition Qualys operations from the implementation partner to steady-state Managed Security Services (MSS).
• Ongoing Configuration & Maintenance: Perform routine updates, scanning policy configurations, and continuous system onboarding (assets, endpoints, cloud instances).
• Vulnerability Scanning & Assessment: Schedule, execute, and analyze authenticated/unauthenticated vulnerability scans across internal and external networks.
• Remediation Tracking & Governance: Track security findings, coordinate remediation timelines with infrastructure and IT teams, conduct follow-ups, and generate vulnerability reduction reports.

2. Secure Access & Data Loss Prevention (Zscaler ZIA, ZPA, ZDLP)

• Monitoring & Management (M&M): Provide ongoing operational support, configuration, and monitoring for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Data Loss Prevention (ZDLP).
• User & Device Management: Manage access policies, web filtering, and secure private application access for an initial scope of ~60 users/devices.
• Incident Handling & Policy Tuning: Monitor ZDLP alerts, refine DLP rules to prevent data leakage, and troubleshoot user connectivity or access policy issues across ZIA and ZPA.

3. Privileged Access Management (CyberArk PAM)

• Privileged Access Operations: Handle day-to-day Monitoring & Management (M&M) of the CyberArk Privileged Access Management solution.
• Policy & Vault Administration: Manage safe access, privileged account onboarding, password rotation policies, and session monitoring/recording.
• Access Request & Incident Review: Validate privileged access requests, audit session recordings for compliance, and investigate anomalous privileged user activity.

Technical Qualifications & Experience

Segment

Requirements

Vulnerability Management

3+ years of experience administering Qualys VMDR. Proven track record in asset onboarding, scan policy tuning, and managing remediation tracking lifecycle.

Zero Trust / SSE

Hands-on operational experience with Zscaler Suite (ZIA, ZPA, ZDLP) including policy creation, traffic inspection, DLP rule tuning, and agent deployment troubleshooting.

PAM Operations

Hands-on operational management of CyberArk Enterprise Password Vault (EPV), Central Policy Manager (CPM), and Privileged Session Manager (PSM).

Core Security & Networking

Strong understanding of network security, enterprise directory services (Active Directory / Entra ID), TCP/IP protocols, and security baseline controls.

Preferred Certifications

• Qualys: Qualys Certified Specialist (Vulnerability Management / VMDR)
• Zscaler: Zscaler Certified Cloud Administrator (ZCCA) or Zscaler Certified Cloud Professional (ZCCP) for ZIA/ZPA
• CyberArk: CyberArk Certified Defender / Guardian / Defender-PAM