Cybersecurity Specialist
Hybrid Role- Hyderabad/Navi Mumbai
About KiddeFenwal
KiddeFenwal is a global leader in fire protection, life safety, and controls solutions. We design and manufacture innovative fire suppression systems, fire detection technologies, safety controls, and monitoring solutions that protect people, critical assets, and high-value environments worldwide. Serving OEMs, distributors, system integrators, and end users, KiddeFenwal is committed to protecting lives, livelihoods, and iconic assets through engineering excellence, operational integrity, and continuous innovation.
Our values—integrity, safety, accountability, speed, innovation, excellence, teamwork, collaboration, and continuous improvement—guide how we work and how we serve our customers.
Position Overview
We are seeking a hands-on Senior Cybersecurity Engineer to join our lean, global IT organization. This role will be responsible for protecting the company's infrastructure, cloud platforms, endpoints, applications, and information assets while supporting a global business footprint.
The ideal candidate combines expertise in security operations, vulnerability management, compliance, incident response, and security governance with the ability to work independently and effectively in a fast-paced environment. This position will work closely with IT infrastructure teams, managed service providers, business stakeholders, auditors, and technology vendors to continuously strengthen the organization's cybersecurity posture.
This is a highly visible role requiring both technical depth and strong communication skills, with significant ownership of cybersecurity initiatives and day-to-day security operations.
Key Responsibilities
Security Operations & Incident Response
- Monitor, investigate, and respond to security alerts, incidents, and suspicious activity across cloud, network, endpoint, and email environments.
- Manage and optimize cybersecurity technologies, including SentinelOne MDR/EDR, Microsoft Defender, SIEM platforms, and email security solutions.
- Conduct root cause analysis, document findings, and drive remediation activities.
- Investigate phishing reports and coordinate incident response efforts.
- Develop and maintain incident response procedures, playbooks, and security runbooks.
- Collaborate with internal teams, MSPs, MDR providers, and other security partners during security incidents.
Vulnerability Management & Security Hardening
- Lead vulnerability management activities using tools such as Qualys, including scanning, prioritization, remediation tracking, and reporting.
- Coordinate penetration testing and security assessments and track remediation of identified findings.
- Drive Microsoft 365 tenant hardening and Zero Trust security initiatives.
- Review system configurations, patching compliance, access controls, and security controls to identify and reduce risk.
- Provide guidance to IT teams on security hardening and remediation activities.
Governance, Risk & Compliance
- Develop, maintain, and improve information security policies, procedures, standards, and incident response plans.
- Support compliance initiatives, including SOC 2, NIST Cybersecurity Framework (CSF), and customer security requirements.
- Assist with internal and external audits, vendor risk assessments, and SOC report reviews.
- Maintain security documentation, risk registers, runbooks, control documentation, and audit evidence.
- Identify security risks and work with stakeholders to develop and track appropriate mitigation strategies.
Security Awareness & Training
- Administer security awareness and phishing simulation programs using platforms such as KnowBe4.
- Deliver quarterly cybersecurity awareness training and coordinate annual company-wide security education initiatives.
- Promote security best practices and a strong culture of cybersecurity awareness across the organization.
Business Continuity & Vendor Security
- Support Business Continuity Planning (BCP) and Disaster Recovery (DR) programs, including testing and validation activities.
- Evaluate third-party software and technology solutions for security and compliance risks.
- Partner with vendors, MSPs, and MDR providers to ensure effective security operations and appropriate security controls.
- Participate in security reviews of new technologies, applications, and services.
Qualifications
Required
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent experience may be considered.
- 7–10 years of experience in cybersecurity, information security, security engineering, or a related field.
- Hands-on experience with:
- SentinelOne EDR/MDR
- Qualys or similar vulnerability management platforms
- Microsoft 365 Security and Entra ID
- Security monitoring, SIEM, and log analysis
- Incident response and security investigations
- Strong understanding of:
- Identity & Access Management (IAM)
- Zero Trust security principles
- Endpoint, network, and cloud security
- Security governance and risk management
- Experience supporting cybersecurity audits and compliance programs.
- Strong analytical, problem-solving, communication, and documentation skills.
- Ability to work independently while effectively collaborating with technical and non-technical stakeholders.
Preferred
- Experience supporting a global, multi-site organization.
- Experience working with MSPs, MDR providers, and third-party security partners.
- Knowledge of Azure security and cloud security architecture.
- Familiarity with application security, API security, Secure SDLC, and OWASP Top 10.
- Experience with cybersecurity frameworks and controls beyond NIST CSF, such as CIS Controls or ISO 27001.
Certifications
- CISSP, CISM, AZ-500, or SC-200 strongly preferred.
- SC-300, Security+, CEH, or equivalent cybersecurity certifications are a plus.
