Grow With Merlin

Summary:

We are seeking a Senior Vulnerability Management Specialist to lead and support the organization’s enterprise vulnerability management program. This role is responsible for identifying, assessing, prioritizing, and tracking security vulnerabilities across infrastructure, applications, endpoints, and cloud environments. The successful candidate will work closely with IT, infrastructure, application, and security teams to reduce organizational risk by ensuring timely remediation of security vulnerabilities and strengthening the overall security posture.

Key Responsibilities:

• Manage and support the enterprise vulnerability management lifecycle, including vulnerability identification, assessment, prioritization, remediation tracking, and reporting.
• Conduct authenticated and unauthenticated vulnerability scans across servers, workstations, network devices, applications, databases, and cloud environments.
• Analyze vulnerability scan results to determine business impact, exploitability, and remediation priorities using industry-standard risk methodologies.
• Coordinate with infrastructure, application, and business teams to validate findings and facilitate timely remediation of identified vulnerabilities.
• Monitor remediation progress and provide regular reporting on vulnerability trends, compliance metrics, and key performance indicators.
• Perform vulnerability assessments for new systems, applications, and cloud deployments prior to production implementation.
• Evaluate security advisories, threat intelligence, and zero-day vulnerabilities to determine organizational exposure and recommend appropriate mitigation strategies.
• Support patch management initiatives by validating remediation efforts and verifying vulnerability closure.
• Develop and maintain vulnerability management policies, procedures, standards, and operational documentation.
• Support internal and external security audits, compliance assessments, and regulatory reporting activities.
• Identify opportunities to improve vulnerability management processes through automation, workflow optimization, and continuous improvement.
• Collaborate with Security Operations, Incident Response, Infrastructure, Cloud, and Application Security teams to strengthen enterprise cyber resilience.

Required Qualifications:

• Minimum of five (5) years of experience in Information Security, including at least three (3) years focused on vulnerability management or security operations.
• Experience managing enterprise vulnerability management programs in complex IT environments.
• Strong understanding of vulnerability assessment methodologies, CVSS scoring, Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE), and risk-based vulnerability management.
• Experience interpreting security advisories and prioritizing remediation based on business risk and threat intelligence.
• Excellent analytical, problem-solving, and organizational skills.
• Strong verbal and written English communication skills with the ability to present technical findings to both technical and non-technical stakeholders.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, GIAC (GPEN, GSEC, GCIH), CompTIA Security+, or equivalent.
• Hands-on experience with vulnerability management platforms such as Tenable, Qualys, Rapid7 InsightVM, Microsoft Defender Vulnerability Management, or similar solutions.
• Experience with patch management technologies and enterprise endpoint management platforms.
• Knowledge of cloud security and vulnerability management across AWS, Microsoft Azure, and Google Cloud Platform.
• Experience with container and Kubernetes vulnerability management.
• Familiarity with security frameworks and standards, including NIST Cybersecurity Framework, NIST 800-53, CIS Controls, ISO/IEC 27001, and PCI DSS.
• Experience with scripting or automation using PowerShell, Python, or similar languages to improve vulnerability management workflows.

Technical Skills

• Enterprise vulnerability scanning and assessment.
• Risk-based vulnerability prioritization.
• Vulnerability remediation tracking and reporting.
• Patch management validation.
• Threat intelligence analysis.
• SIEM and security monitoring platforms.
• Endpoint and cloud security technologies.
• Security reporting and metrics development.
• Security compliance and audit support.

Work Schedule

• Primary support during US business hours.
• Participation in after-hours activities or on-call support for critical vulnerabilities and security events, as needed.
• Collaboration with global teams to support enterprise vulnerability management initiatives.

Job Type: Fulltime
Location: 100% Remote
Email: resumes@merlinsol.com

Summary:

We are seeking experienced Information Security professionals to support enterprise security operations, security architecture and design reviews, incident response, digital forensic investigations, and remediation efforts. This role requires advanced technical expertise in cybersecurity operations and the ability to collaborate with cross-functional teams to protect organizational assets and respond to security threats.

The position primarily supports the US Central Time shift and requires participation in an on-call rotation as needed.

Key Responsibilities:

• Monitor, detect, investigate, and respond to security incidents across enterprise environments.
• Perform incident triage, containment, eradication, recovery, and post-incident analysis.
• Conduct digital forensic investigations and provide remediation recommendations following security events.
• Review security designs, system architectures, and network architectures to ensure compliance with security standards and best practices.
• Support security operations on a continuous, shift-based schedule, including coverage during evenings, weekends, holidays, and other off-hours as required.
• Administer and support security technologies, including SIEM, endpoint protection, vulnerability management, and cloud security solutions.
• Participate in security projects by providing technical guidance and cybersecurity expertise.
• Perform security assessments and reviews of third-party vendors and technologies.
• Collaborate with internal stakeholders to support security initiatives, investigations, audits, and compliance activities.
• Stay informed of emerging cyber threats, vulnerabilities, and industry best practices to strengthen the organization’s security posture.

Required Qualifications:

• Minimum of five (5) years of experience in Information Security Operations.
• Demonstrated experience in security monitoring, incident response, threat analysis, and risk mitigation.
• Strong understanding of cybersecurity frameworks, security controls, and industry best practices.
• Experience supporting enterprise security operations within complex IT environments.
• Excellent analytical, troubleshooting, and problem-solving skills.

Job Type: Fulltime
Location: 100% Remote
Email: resumes@merlinsol.com

Summary:

The Senior Information Security Analyst is responsible for providing continuous security operations support through a 24×7 shift-based operating model, including coverage during evenings, weekends, holidays, and U.S. off-hours. This role is responsible for monitoring the organization’s security posture, detecting and responding to security incidents, supporting security technologies, and contributing to enterprise security initiatives. The ideal candidate demonstrates advanced expertise in security operations, incident response, threat analysis, and risk mitigation while working collaboratively across technical and business teams.

Key Responsibilities:

• Continuously monitor enterprise security systems to identify, analyze, and respond to security events and incidents in accordance with established procedures and service level expectations.
• Perform incident investigation, containment, escalation, and coordination to minimize business impact and support timely resolution.
• Support the administration, maintenance, and optimization of security technologies, including monitoring platforms, endpoint protection, and cloud security controls.
• Participate in vulnerability management activities by validating findings, assisting with remediation efforts, and tracking risk reduction initiatives.
• Support security-related projects, technology implementations, and operational improvements.
• Conduct security reviews of third-party vendors and assist with risk assessments as required.
• Collaborate with infrastructure, application, compliance, and business teams to support security investigations, audits, and enterprise security initiatives.
• Maintain accurate documentation of incidents, investigations, and operational procedures while contributing to continuous process improvement.

Required Qualifications:

• Minimum of five (5) years of experience in Information Security Operations with demonstrated expertise in security monitoring, incident response, threat analysis, and risk mitigation.
• Strong understanding of security operations processes, cyber threat detection, and incident management methodologies.
• Experience administering and monitoring Security Information and Event Management (SIEM) platforms.
• Hands-on experience with vulnerability management solutions, endpoint detection and protection technologies, and cloud security controls.
• Ability to analyze complex security events, prioritize risks, and respond effectively in a fast-paced operational environment.
• Excellent written and verbal communication skills with the ability to collaborate effectively across global teams.
• Willingness to work rotating shifts supporting a 24×7 security operations environment, including evenings, weekends, holidays, and U.S. off-hours.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• Certified Ethical Hacker (CEH).
• Equivalent industry-recognized cybersecurity certifications will also be considered.

Job Type: Fulltime
Location: 100% Remote
Email: resumes@merlinsol.com

Summary:

The Systems Administrator II is responsible for administering and maintaining the organization’s server, identity, and infrastructure platforms while serving as the primary escalation point for Level 1 Operations Analysts. This role combines hands-on technical administration with day-to-day operational leadership, ensuring production systems remain secure, reliable, and compliant. Success in this position requires strong troubleshooting skills, disciplined change management, and the ability to mentor team members while maintaining service levels.

Key Responsibilities:

• Serve as the primary escalation point for incidents transferred from Level 1 support, performing advanced troubleshooting and resolving issues or escalating to Level 3 support with complete diagnostic documentation.
• Manage the monthly server patching lifecycle, including scheduled maintenance and emergency deployment of critical security updates across approximately 95 Windows Server instances.
• Validate daily backup operations and coordinate quarterly disaster recovery testing, including restore-to-alternate-location exercises.
• Monitor system performance, capacity utilization, and infrastructure health to identify trends and recommend resource optimization and right-sizing initiatives.
• Administer Active Directory services, including domain controller health, replication monitoring, Group Policy management, and certificate lifecycle administration.
• Lead daily operational shift handoffs, review ticket quality, provide technical guidance, and coach Operations Analysts on troubleshooting procedures and runbook execution.
• Plan, document, and implement infrastructure changes through the organization’s formal change management process while communicating risks and expected impacts to stakeholders.

Platform Responsibilities:

Windows Server & Azure Infrastructure

• Administer approximately 95 Windows Server virtual machines hosted in Microsoft Azure.
• Perform patch management, health monitoring, backup validation, and capacity planning.
• Manage Group Policy Objects (GPOs), certificates, and server configuration baselines.

Identity & Microsoft 365

• Administer Microsoft Entra ID and Microsoft 365 services.
• Manage user identity lifecycle, licensing, Conditional Access policies, and Exchange administration.

Network Infrastructure

• Support approximately 106 enterprise network devices.
• Perform switch firmware updates, wireless access point management, SD-WAN policy administration, and network capacity planning.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
• Five or more years of experience administering Windows Server environments in a production enterprise environment.
• Demonstrated expertise with Active Directory, Group Policy, enterprise patch management, and Windows infrastructure administration.
• Experience leading, mentoring, or providing technical direction to IT operations or infrastructure teams.
• Strong troubleshooting skills across server, storage, virtualization, and foundational networking technologies.
• Experience managing production infrastructure changes and effectively communicating technical risks to stakeholders.

Preferred Qualifications

• Hands-on experience administering Microsoft Azure infrastructure, including virtual machines, monitoring, backup, and recovery.
• Experience supporting Linux server environments.
• Experience working within a Managed Services Provider (MSP) or enterprise operations environment.

Preferred Certifications

• Microsoft Certified Solutions Expert (MCSE) or equivalent Microsoft Windows Server certification (required).
• Microsoft Certified: Azure Administrator Associate (preferred).
• ITIL Foundation or ITIL Practitioner certification (required).

Job Type: Fulltime
Location: 100% Remote
Email: resumes@merlinsol.com

Summary:

The NOC Analyst is responsible for continuously monitoring enterprise IT and operational technology (OT) environments, responding to system alerts, and performing first-line troubleshooting in a fast-paced, process-driven environment. This role requires strict adherence to established standard operating procedures (SOPs) to ensure all incidents are acknowledged, accurately classified, and either resolved or escalated within defined service level agreements (SLAs). Success is measured by timely response, accurate documentation, and ensuring no incidents are overlooked.

Key Responsibilities:

• Continuously monitor enterprise infrastructure using Azure Monitor, Log Analytics, FortiAnalyzer, and network monitoring systems to identify alerts and operational anomalies across approximately:
  
  • 100 Azure virtual machines
  • 106 network devices
  • 22 operational technology (OT) field sites
• Receive, document, and classify system alerts and user-reported incidents within the IT service management (ITSM) platform, assigning appropriate priority levels (P1–P4) and recording relevant diagnostic information.
• Perform first-level troubleshooting using established runbooks, including service restarts, connectivity verification, password and access resets, and standard diagnostic procedures.
• Escalate unresolved incidents to Level 2 support within established response timeframes, providing complete troubleshooting notes and diagnostic findings to enable efficient resolution.
• Communicate incident status and progress to end users and stakeholders in accordance with SLA requirements.
• Ensure accurate shift handoffs by documenting open incidents, ongoing investigations, and outstanding actions.

Platform Responsibilities:

Azure Infrastructure

• Monitor virtual machine availability and performance.
• Acknowledge and respond to infrastructure alerts.
• Perform basic recovery and restart procedures.

Enterprise Network

• Monitor availability of approximately 106 network devices.
• Respond to connectivity and link-down alerts.
• Perform basic network and port troubleshooting.

Operational Technology (OT) Environment

• Monitor the health of FortiGate 70F firewalls across 22 remote sites.
• Verify VPN tunnel connectivity.
• Perform alert triage in accordance with established SOPs.

Security Operations

• Monitor Fortinet security alerts and events.
• Review logs and identify false-positive alerts.
• Escalate potential security incidents when appropriate.

Microsoft 365 Environment

• Monitor Microsoft 365 service health for approximately 1,500 users.
• Troubleshoot user access issues and perform basic mailbox support.

Required Qualifications

• High school diploma or equivalent required; Associate’s or Bachelor’s degree in Information Technology, Computer Science, or a related discipline preferred.
• One to three years of experience in a Network Operations Center (NOC), IT Help Desk, Service Desk, or IT Operations environment.
• Working knowledge of Windows Server and foundational networking concepts, including TCP/IP, DNS, and DHCP.
• Ability to work rotating shifts, including evenings, weekends, and holidays as needed.
• Strong written communication skills with an emphasis on accurate ticket documentation.
• Demonstrated ability to follow documented procedures, troubleshooting guides, and escalation processes in a structured operational environment.

Preferred Qualifications

• Experience supporting Microsoft Azure, Microsoft 365, or Fortinet technologies.
• Experience using enterprise ITSM platforms such as ServiceNow.
• Exposure to utility, energy, manufacturing, or industrial OT environments.

Preferred Certifications

• ITIL Foundation.
• CompTIA Network+ or Security+ (Security+ preferred for second-shift assignments).
• Microsoft 365 Fundamentals and/or Microsoft Azure Fundamentals.

Job Type: Fulltime
Location: 100% Remote
Email: resumes@merlinsol.com

Looking for a senior person to manage a team of 2-3 accountants for the India office. Will be responsible for interacting with the CA to file India tax returns, and ensuring regulatory compliance are done for India office. 20+ years of accounting and finance experience preferred. Experience working with an IT consulting and staffing company is a must. Preference to candidates based in Hyderabad. This is an onsite position. Tally experience required.

Please submit resumes to resumes@merlinsol.com.

Looking for a senior recruiter with 8+ years of recruiting experience for India resources. Hyderabad is a preferred location. Local to Hyderabad is preferred, and willing to come to the office 5 days a week.

Please submit resumes to resumes@merlinsol.com.

This individual will be working primarily on QuickBooks and responsible for accounting for a US-based IT staffing and consulting company. Person should have 8+ years of experience working for the Indian office of a US based firm. Candidates should have good comm skills and follow up skills.

Please submit resumes to resumes@merlinsol.com.

The individual should be proficient in Tally and have 8+ years of Tally experience. Must be local to Hyderabad, and willing to come to the office 5 days a week.

Please submit resumes to resumes@merlinsol.com.