About the role
📍 Location: Bengaluru, India
🕒 Experience: 5 to 8 years
💼 Employment Type: Full-time
About the Role:We are looking for a skilled and motivated Security Engineer with 5+ years of experience to join our growing InfoSec team in Bengaluru. The ideal candidate will have a strong foundation in cloud security, infrastructure hardening, threat detection and response, and vulnerability management.
Key Responsibilities:- Design, implement, and maintain security tools and infrastructure (SIEM, IDS/IPS, WAF, endpoint protection).
- Conduct regular security assessments including vulnerability scans, penetration tests, and risk assessments.
- Monitor, detect, and respond to security incidents, escalating as required.
- Implement and enforce security best practices across cloud (AWS/Azure/GCP) and on-premise environments.
- Work with DevOps and Engineering teams to integrate security into CI/CD pipelines.
- Assist in achieving and maintaining compliance frameworks (ISO 27001, SOC 2, GDPR, etc.).
- Develop and maintain documentation related to security policies, procedures, and incident reports.
- Conduct internal security awareness training and phishing simulations.
- 5+ years of experience in cybersecurity or a related technical field.
- Strong knowledge of network security, cloud security, and endpoint protection.
- Hands-on experience with security tools such as:
- SIEM (e.g., Splunk, ELK, Sumo Logic)
- Vulnerability scanners (e.g., Nessus, Qualys)
- EDR solutions (e.g., CrowdStrike, SentinelOne)
- WAFs, IDS/IPS, firewalls
- Proficient in cloud platforms (AWS/GCP/Azure) and security hardening in cloud environments.
- Experience with scripting languages (Python, Bash, PowerShell) for automation and tooling.
- Familiarity with compliance and regulatory frameworks (e.g., ISO, SOC2, NIST).
- Excellent problem-solving and communication skills.
- Security certifications (e.g., CISSP, CEH, OSCP, CISM, AWS Security Specialty).
- Experience in Kubernetes and container security.
- Prior experience working in high-growth SaaS or tech environments.
- Knowledge of DevSecOps practices and tools.