Security Engineer

We are looking for someone who can single-handedly own the security operations and governance for a cloud-native B2B commerce platform.

The core responsibilities for the job include the following:

Security Operations and Incident Response:

• Hands-on experience with SIEM and EDR tools for security monitoring, alert triaging, and incident response.
• Experience in incident investigation, response playbooks, CERT-In reporting, and post-incident reviews.
• Conducting tabletop exercises and security incident simulations.

Vulnerability and Exposure Management:

• Experience with vulnerability assessment, scanning, and remediation across cloud, containers, applications, and endpoints.
• Hands-on experience with VAPT, penetration testing, and red team engagements.
• Knowledge of vulnerability remediation SLAs, WAF rules, and virtual patching.

Endpoint Security and Infrastructure Resilience:

• Experience managing EDR solutions across endpoints and servers.
• Endpoint patch management and compliance monitoring.
• Knowledge of backup validation, restoration testing, and disaster recovery drills.

Cloud Security (AWS):

• Hands-on experience with AWS security services and cloud security posture management.
• Knowledge of Prisma Cloud, AWS Security Hub, and Prowler.
• Expertise in IAM, security groups, network ACLs, firewall configurations, and cloud misconfiguration remediation.
• Experience implementing encryption, MFA, key rotation, logging, and least-privilege access.

Identity and Privileged Access Management:

• Experience with IAM, user provisioning, and deprovisioning (Joiner-Mover-Leaver).
• Access reviews, privileged account management, and user access certification.
• Hands-on experience with PAM, LAPS, and Active Directory/domain authentication.

ISO 27001, Policies and Audits:

• Strong understanding of ISO 27001 and Information Security Management Systems (ISMS).
• Experience maintaining security policies, procedures, risk registers, and Statement of Applicability (SoA).
• Internal/external audits, evidence collection, and audit remediation.

Data Privacy and Vendor Risk Management:

• Knowledge of India's Digital Personal Data Protection (DPDP) Act.
• Experience with data inventory, privacy controls, encryption, logging, and data erasure.
• Vendor security assessments, third-party risk management, and compliance documentation.

Security Governance, Reporting, and Awareness:

• Experience preparing security dashboards, Key Risk Indicators (KRIs), and compliance reports.
• Security reviews, vendor coordination, policy communication, and audit checklists.
• Conducting employee security awareness training and phishing simulations.

AI Security and Governance:

• Understanding of AI security policies, enterprise AI governance, and approved AI tool management.
• Experience reviewing AI use cases for data privacy, access control, prompt injection, and third-party model risks.
• Knowledge of DLP solutions and monitoring/blocking unauthorized AI applications.
• Understanding of OWASP Top 10 for LLM Applications, API security, guardrails, and human-in-the-loop controls.
• Maintaining AI use-case inventories and security audit records.

Requirements:

• 3-5 years of experience in information security, security operations, vulnerability management, or cloud security.
• Minimum 2 years of hands-on cloud security experience, preferably AWS.
• Strong understanding of AWS security services, including IAM, VPC, security groups, CloudTrail, GuardDuty, Security Hub, and KMS (Key Management Service).
• Experience working with SIEM, EDR, WAF, and vulnerability management tools.
• Exposure to Qualys, Prisma Cloud, and Snyk.
• Knowledge of ISO 27001 controls, security audits, and audit evidence management.
• Scripting knowledge in Python or Bash for security automation.

Skills

AWS, CloudTrail, EDR, GuardDuty, IAM, ISMS, ISO 27001, KMS, SIEM