Information Security Engineer

Your Core Responsibilities:

• Analyse security logs, alerts and reported events, and respond to or assist with the remediation of incidents.
• Hunt for potential compromise across the infrastructure using a range of threat intelligence sources.
• Report discovered vulnerabilities to technology owners and recommend remediation steps.
• Support and improve technical security controls.
• Leverage automation and orchestration to remove repetitive manual work.
• Apply AI-assisted tooling to alert triage, event summarisation and investigation workflows, with a pragmatic view of its limitations.
• Develop reporting that measures the effectiveness of security controls.
• Develop and improve incident response playbooks.
• Support regulatory and assurance audits: prepare evidence, coordinate with auditors and track observations through to closure.

Your Skills and Experience:

• Strong analytical and problem-solving skills.
• A self-starter with a genuine passion for cybersecurity.
• Previous SOC experience, and/or 3+ years of hands-on experience in an enterprise IT environment managing endpoints and applications on-premises or in the cloud.
• Exposure to security controls such as identity and access management, vulnerability management, and endpoint detection and response.
• Working knowledge of — or a strong willingness to learn — the Indian regulatory cybersecurity landscape: SEBI CSCRF, exchange circulars (NSE/BSE/MCX) and CERT-In directions, along with familiarity with ISO 27001 and the NIST CSF on which CSCRF is modelled.
• Experience supporting audits (cyber audit, systems audit, VAPT, ISO or SOC 2 assessments) — evidence preparation, auditor coordination and observation remediation — is a strong plus.
• Automation using basic coding skills or low-code / no-code tools.
• Awareness of AI and machine learning applications in security operations is a plus; hands-on experience with AI-assisted security tooling or LLM-based workflows is highly regarded.
• Understanding of common attack techniques and frameworks such as MITRE ATT&CK.
• Strong documentation and communication skills, with the ability to translate technical findings into audit-ready evidence and regulator-facing reports.
• Relevant tertiary and/or security qualifications are a plus — for example a Bachelor's degree in information systems or computer science, CompTIA Security+, Certified in Cybersecurity (CC), CEH, or ISO 27001 Lead Auditor / Lead Implementer. If you don't have them yet, you will be supported to pursue certifications on the job.