4Bell Technology
Senior Information Security Engineer (MSS)(R-2016)
900,000.00-1,000,000.00/A
Any Degree
IT (Information Technology)
Contract
Mumbai
10-Oct-2026
Security Engineer Managed Security Services (MSS) Qualys (VMDR) Zscaler (ZIA/ZPA/ZDLP) CyberArk (PAM) CyberArk Enterprise Password Vault (EPV) Central Policy Manager (CPM) Privileged Session Manager (PSM) Active Directory / Entra ID TCP/IP protocols
Job Description
Key Responsibilities by Business Segment
1. Vulnerability Management (Qualys)
- Operational
Handover & Setup: Transition Qualys operations from the
implementation partner to steady-state Managed Security Services (MSS).
- Ongoing
Configuration & Maintenance: Perform routine updates, scanning
policy configurations, and continuous system onboarding (assets,
endpoints, cloud instances).
- Vulnerability
Scanning & Assessment: Schedule, execute, and analyze
authenticated/unauthenticated vulnerability scans across internal and
external networks.
- Remediation
Tracking & Governance: Track security findings, coordinate
remediation timelines with infrastructure and IT teams, conduct
follow-ups, and generate vulnerability reduction reports.
2. Secure Access & Data Loss Prevention (Zscaler ZIA,
ZPA, ZDLP)
- Monitoring
& Management (M&M): Provide ongoing operational support,
configuration, and monitoring for Zscaler Internet Access (ZIA), Zscaler
Private Access (ZPA), and Zscaler Data Loss Prevention (ZDLP).
- User
& Device Management: Manage access policies, web filtering, and
secure private application access for an initial scope of ~60
users/devices.
- Incident
Handling & Policy Tuning: Monitor ZDLP alerts, refine DLP rules to
prevent data leakage, and troubleshoot user connectivity or access policy
issues across ZIA and ZPA.
3. Privileged Access Management (CyberArk PAM)
- Privileged
Access Operations: Handle day-to-day Monitoring & Management
(M&M) of the CyberArk Privileged Access Management solution.
- Policy
& Vault Administration: Manage safe access, privileged account
onboarding, password rotation policies, and session monitoring/recording.
- Access
Request & Incident Review: Validate privileged access requests,
audit session recordings for compliance, and investigate anomalous
privileged user activity.