The Role
Own endpoint, identity, SaaS, and incident response security operations. Manage CrowdStrike and JumpCloud, investigate and contain threats, improve detection, harden systems, conduct access reviews, support compliance audits, and automate offboarding, alert response, and governance workflows. Correlate endpoint, infrastructure, network, and SaaS signals while developing playbooks, dashboards, policies, and security baselines.
Summary Generated by Built In
We are looking for a hands-on Security Engineer who can operate, build, and automate security across endpoints, identity systems, and SaaS applications.This role will own security operations using tools like CrowdStrike, JumpCloud, ManageEngine OpsManager, and our SaaS ecosystem. You will not just respond to alerts—you will improve detection, reduce risk, and automate security workflows.
What You Will Own
1. Endpoint Security (Primary Ownership)
- Manage and optimize policies in CrowdStrike
- Investigate and respond to endpoint alerts (malware, suspicious behaviour, lateral movement)
- Perform root cause analysis and prevent recurrence
- Improve detection coverage using behavioural rules and threat intelligence
2. Identity & Access Security
- Secure user lifecycle management via JumpCloud
- Enforce:
- MFA across all systems
- Least privilege access
- Device trust policies
- Design and execute periodic access reviews
- Investigate identity-related incidents (account compromise, privilege misuse)
3. SaaS Security & Risk Management
- Audit and secure SaaS platforms (Google Workspace, Slack, Zoom, etc.)
- Identify and remediate:
- Over-permissioned users
- Risky OAuth integrations
- Public data exposure
- Define SaaS security baselines and governance controls
4. Incident Detection & Response
- Own the full incident lifecycle:
- Detection → Triage → Containment → Recovery → RCA
- Build and maintain incident response playbooks
- Partner with Service Desk for rapid containment actions
- Continuously improve response time and accuracy
5. Security Automation (Core Expectation)
- Automate:
- User offboarding (access revocation + device lockdown)
- Alert-driven responses (via EDR and identity tools)
- Access reviews and compliance checks
- Reduce manual effort and improve consistency across security operations
6. Monitoring, Visibility & Correlation
- Correlate signals from: CrowdStrike (endpoint) , ManageEngine OpManager (infra/network) and SaaS audit logs
- Build meaningful dashboards and alerts
- Improve signal-to-noise ratio (reduce alert fatigue)
7. Policy, Hardening & Compliance
- Define and enforce:
- Endpoint hardening standards
- Identity and access policies
- Incident response procedures
- Support audits (ISO/SOC2 if applicable)
- Ensure continuous improvement of security posture
Requirements
What We Expect
Core Technical Skills-
- Strong hands-on experience with:
CrowdStrike (or similar EDR like SentinelOne, Defender)
JumpCloud / Okta / Azure AD - Real-world incident response experience (not just theoretical SOC work)
- Deep understanding of:
Endpoint attack techniques
Identity-based attacks
SaaS security risks
Automation & Engineering Mindset
- Experience with scripting (Python / Bash / PowerShell)
- Ability to automate workflows and integrate tools
- Strong problem-solving and system thinking approach
Security Fundamentals
- MITRE ATT&CK framework understanding
- Endpoint detection and response concepts
- Identity & access management principles (SSO, MFA, RBAC)
Experience
- 6-10 years in Security Engineering / Blue Team / Endpoint Security
- Experience in SaaS-heavy or cloud-first environments preferred
Skills Required
- Strong hands-on experience with CrowdStrike or a similar EDR such as SentinelOne or Microsoft Defender
- Strong hands-on experience with JumpCloud, Okta, or Azure AD
- Real-world incident response experience
- Deep understanding of endpoint attack techniques
- Deep understanding of identity-based attacks
- Deep understanding of SaaS security risks
- Scripting experience with Python, Bash, or PowerShell
- Ability to automate workflows and integrate security tools
- Understanding of the MITRE ATT&CK framework
- Understanding of endpoint detection and response concepts
- Understanding of identity and access management principles, including SSO, MFA, and RBAC
- 6-10 years of experience in Security Engineering, Blue Team, or Endpoint Security
- Experience in SaaS-heavy or cloud-first environments
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
We are one of India’s most exciting & fast-growing mobile gaming companies. Founded in 2014, and creating a global mobile gaming landscape in partnership with Modern Times Group (MTG), our vision is to create simple, impactful casual game experiences at a massive scale. Since our inception, we have built a worldwide network of chart-topping games, and powerful tech & analytics infrastructure to turbocharge their growth. Our product portfolio consists of evergreen hits like Daily Themed Crossword, WordTrip, WordJam, WordWars, WordTrek and Solitaire. Visit us at www.playsimple.in to know more. Recent news about PlaySimple: https://techcrunch.com/2021/07/02/swedish- gaming-giant-acquires-indiaplaysimple-for-360-million/
