4Bell Technology

Staffing & Recruiting

Senior Information Security Engineer (MSS)(R-2016)

900,000.00-1,000,000.00/A

Any Degree

IT (Information Technology)

Contract

Mumbai

10-Oct-2026

Security Engineer Managed Security Services (MSS) Qualys (VMDR) Zscaler (ZIA/ZPA/ZDLP) CyberArk (PAM) CyberArk Enterprise Password Vault (EPV) Central Policy Manager (CPM) Privileged Session Manager (PSM) Active Directory / Entra ID TCP/IP protocols

Job Description

Key Responsibilities by Business Segment

1. Vulnerability Management (Qualys)

  • Operational Handover & Setup: Transition Qualys operations from the implementation partner to steady-state Managed Security Services (MSS).
  • Ongoing Configuration & Maintenance: Perform routine updates, scanning policy configurations, and continuous system onboarding (assets, endpoints, cloud instances).
  • Vulnerability Scanning & Assessment: Schedule, execute, and analyze authenticated/unauthenticated vulnerability scans across internal and external networks.
  • Remediation Tracking & Governance: Track security findings, coordinate remediation timelines with infrastructure and IT teams, conduct follow-ups, and generate vulnerability reduction reports.

2. Secure Access & Data Loss Prevention (Zscaler ZIA, ZPA, ZDLP)

  • Monitoring & Management (M&M): Provide ongoing operational support, configuration, and monitoring for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Data Loss Prevention (ZDLP).
  • User & Device Management: Manage access policies, web filtering, and secure private application access for an initial scope of ~60 users/devices.
  • Incident Handling & Policy Tuning: Monitor ZDLP alerts, refine DLP rules to prevent data leakage, and troubleshoot user connectivity or access policy issues across ZIA and ZPA.

3. Privileged Access Management (CyberArk PAM)

  • Privileged Access Operations: Handle day-to-day Monitoring & Management (M&M) of the CyberArk Privileged Access Management solution.
  • Policy & Vault Administration: Manage safe access, privileged account onboarding, password rotation policies, and session monitoring/recording.
  • Access Request & Incident Review: Validate privileged access requests, audit session recordings for compliance, and investigate anomalous privileged user activity.