Windows Security Engineer

We are looking for a Windows Security Engineer to secure and maintain Windows client, server, and hybrid environments. This role has a strong focus on managing and remediating vulnerabilities across Windows servers, coordinating patching and configuration changes, and working with Security, Infrastructure, and Application teams to keep systems secure and compliant., * Identify, track, prioritize, and remediate vulnerabilities across Windows server environments.

• Plan, coordinate, and deploy Windows operating system patches and security updates using HCL BigFix.
• Apply and maintain Windows security baselines, Group Policy settings, and other hardening measures.
• Troubleshoot patching failures and related Windows system issues.
• Manage vulnerability, incident, and change tickets, and provide status updates through ServiceNow.
• Coordinate remediation activities with Security, Infrastructure, and Application teams.
• Monitor security alerts, investigate system issues, and support incident response and remediation.
• Support Microsoft Defender for Endpoint and related EDR/XDR and SIEM integrations.
• Support Active Directory, Microsoft Entra ID, Intune, and access security controls.
• Use PowerShell or Python to automate security checks, reporting, and configuration tasks.
• Conduct security posture reviews and maintain technical documentation and remediation playbooks.

• 5+ years of experience in Windows systems engineering, IT infrastructure, or enterprise cybersecurity.
• Strong Windows Server administration and troubleshooting skills.
• Experience using HCL BigFix for patch deployment and management.
• Experience using ServiceNow for incident, change, and vulnerability tracking.
• Knowledge of Windows security, vulnerability remediation, patching, and system hardening.
• Understanding of Windows internals, Active Directory, Group Policy, and security baselines.
• Familiarity with Microsoft Defender, Intune, BitLocker, and Microsoft Entra ID security controls.
• Experience with PowerShell automation, Python or Bash scripts.
• Knowledge of networking and security fundamentals, including DNS, TLS, firewalls, and authentication protocols.
• Experience with Zero Trust, cloud or hybrid environments, or tools such as SCCM, Okta, or Zscaler is a plus.
• Strong problem-solving, communication, and cross-team coordination skills.
• Relevant Microsoft, cybersecurity, or industry certifications are an advantage., 30+ years of excellence CloudMobileIoTEmergency Management SuiteOffshore Development