{"id":1280038,"url":"https://alion.io/job/antino-information-security-engineer","title":"Information Security Engineer","company":{"id":9454,"name":"Antino","domain":"antino.com","url":"https://alion.io/company/antino","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Metasploit","optional":false},{"name":"MobSF","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Veracode","optional":false}],"status":"live","first_seen_at":"2026-08-21T05:53:55Z","employer_posted_date":null,"last_verified_at":"2026-08-21T05:53:55Z","board_verified":false,"closed_at":null,"days_open":56,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":56},"description":"Job Description Information Security Engineer\n\nPosition : Information Security Engineer / Application Security Engineer\n\nExperience : 4 - 8 years\n\nRole Type : Individual Contributor / Security Engineering\n\nPrimary Focus : Application Security, API Security, VAPT, Threat Modeling, Secure Code Review & Compliance\n\nCloud : AWS\n\nDomain : SaaS / AI-ML Product Environment\n\nAbout the Role : \n\nWe are looking for a hands-on Information Security Engineer to take ownership of application, API, and product security across web, mobile, and API surfaces.\n\nThe ideal candidate should have strong practical experience in VAPT, application security, threat modeling, secure code review, security architecture, and security compliance.\n\n This role requires someone who can interpret security findings, assess exploitability and business impact, recommend remediation, and work closely with engineering teams to close vulnerabilities.\n\nThis is a security engineering role, not primarily a security tooling or DevSecOps role.\n\nKey Responsibilities : \n\n1. Application & API Security : \n\n- Conduct hands-on security assessments of web applications, APIs, and mobile applications.\n\n- Perform VAPT across web, mobile, and API surfaces.\n\n- Identify vulnerabilities and assess their exploitability, severity, and business impact.\n\n- Validate and prioritize security findings.\n\n- Work with developers to define and track remediation.\n\n- Perform security testing during the SDLC.\n\n2. Threat Modeling : \n\n- Conduct threat modeling for new features, applications, APIs, and system architectures.\n\n- Identify attack vectors, security risks, and potential abuse cases.\n\n- Recommend appropriate security controls and mitigations.\n\n- Collaborate with Product, Engineering, and Architecture teams during design phases.\n\n3. Secure Code Review : \n\n- Perform manual and automated security-focused code reviews.\n\n- Identify vulnerabilities that automated scanners may miss.\n\n- Review application code for common security issues such as : OWASP Top 10, Authentication & authorization vulnerabilities, Injection vulnerabilities, SSRF, XSS, CSRF, Insecure API implementations, Sensitive data exposure, and Business logic vulnerabilities.\n\n4. Security Architecture : \n\n- Provide security inputs during application and infrastructure architecture discussions.\n\n- Review security controls across AWS-based environments.\n\n- Assess authentication, authorization, encryption, secrets management, network security, IAM, logging, etc.\n\n- Provide security recommendations for AI/ML applications and services.\n\n5. AI/ML Security : \n\n- Assess security risks associated with AI/ML applications and APIs.\n\n- Identify potential risks around : Prompt injection, Data leakage, Model/API abuse, Insecure integrations, Sensitive information exposure, and Access control.\n\n- Provide security recommendations for AI-enabled products.\n\n6. Compliance & Audit Readiness : \n\n- The candidate should have practical experience supporting security/compliance programs, particularly : SOC 2, ISO 27001, GDPR, and CCPA.\n\nResponsibilities may include : \n\n- 1. Preparing evidence for audits.\n\n- 2. Supporting security control implementation.\n\n- 3. Identifying compliance gaps.\n\n- 4. Working with internal teams to close gaps.\n\n- 5. Supporting external auditors during certification/audit cycles.\n\n- 6. Maintaining security documentation and policies.\n\nMandatory Technical Skills : \n\n- VAPT : Hands-on Mandatory\n\n- Web Security : Strong\n\n- API Security : Strong\n\n- Mobile Security : Hands-on experience preferred/required\n\n- Threat Modeling : Hands-on\n\n- Secure Code Review : Hands-on\n\n- OWASP : Strong knowledge\n\n- Application Security : Strong\n\n- Security Architecture : Good understanding\n\n- AWS Security : Good understanding\n\n- SOC 2 / ISO 27001 : Practical audit/compliance experience\n\n- GDPR / CCPA : Working knowledge\n\n- AI/ML Security : Exposure/understanding preferred\n\nSecurity Tools : \n\n- The candidate may have experience with tools such as : Burp Suite, OWASP ZAP, MobSF, Semgrep, SonarQube, Trivy, Snyk, Checkmarx / Veracode, Nessus / Qualys, Nmap, and Metasploit.\n\nImportant : \n\nTool knowledge alone is not sufficient. The candidate must be able to interpret findings, manually validate vulnerabilities, assess risk/exploitability, and drive remediation.\nSkills\nInformation Security, IT Security Strategy, VAPT, Threat Modeling, Applications Security, Security Tools, Security Operations Center, IT Compliance, OWASP","description_format":"text","description_chars":4462,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-09-26T02:00:24Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.385,"p_room":0.35,"age_days":55,"expected_fill_days":21,"reasons":["seen:55","velocity","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/antino-information-security-engineer","json_url":"https://alion.io/job/antino-information-security-engineer.json","meta":{"generated_at":"2026-10-16T19:03:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4480,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9454},"rest":"https://alion.io/mcp/rest/get_company?id=9454"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fantino-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fantino-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fantino-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/antino-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fantino-information-security-engineer"}]}