{"id":462960,"url":"https://alion.io/job/bureau-information-security-engineer","title":"Information Security Engineer","company":{"id":178276,"name":"Bureau","domain":"bureau.id","url":"https://alion.io/company/bureau-2","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CAPA","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Knowledge Graph","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Falco","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2025-12-16T09:14:56Z","employer_posted_date":"2025-12-16","last_verified_at":"2026-10-28T18:08:48Z","board_verified":true,"closed_at":null,"days_open":316,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":315},"description":"About Bureau\nBureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally.\nBureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond.\nWhy Bureau?\nBureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real.\nWe hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates-keep reading.\nAbout the Role - Information Security Engineer\nWe are looking for a Security Engineer who can own both the hands-on technical security stack and our governance/compliance programs.\nWhat you’ll be doing\nIn this role, you will:\nHarden and monitor our cloud & container infrastructure (AWS/EKS, endpoints, network).\n\nRun vulnerability management, security tooling and incident response.\n\nHelp maintain our ISMS and support audits (ISO 27001, SOC 2, RBI, DPDP, etc.).\n\nThis is ideal for someone who doesn’t want to be only “checklist GRC” or only “pure blue-team”, but wants a blended role across security engineering + GRC.Key Responsibilities\n1. Cloud & Infrastructure Security (Hands-on)\nWork with DevOps to secure our AWS/EKS environment:\nIAM hardening, security groups, VPC, KMS, S3, RDS, etc.\n\nReview infra-as-code (Terraform/Helm) for security issues and misconfigurations.\n\nOwn or co-own key security tools:\nEndpoint / EDR (e.g., CrowdStrike / SentinelOne),\n\nCloud security (CSPM / CNAPP, GuardDuty, Security Hub, WAF, etc.),\n\nContainer / runtime security where applicable.\n\nImplement and maintain logging & monitoring for security events (CloudTrail, ALB/NLB logs, K8s logs, etc.), and integrate them with SIEM / alerting.\n\n2. Vulnerability Management & Security Operations\nOwn the vulnerability management lifecycle:\nRun periodic scans for cloud, endpoints, containers and apps.\n\nTriage findings, prioritise based on risk, and drive closure with engineering.\n\nCoordinate external pentests / bug bounties and track remediation.\n\nSupport incident response:\nHelp investigate alerts, gather evidence, and contribute to RCA and CAPA.\n\nMaintain and update incident runbooks.\n\n3. Governance, Risk & Compliance (ISMS, Audits, DPDP)\nMaintain and enhance the Information Security Management System (ISMS):\nPolicies, procedures, SoA, risk register, control evidence and audit trails.\n\nSupport internal and external audits: ISO 27001, SOC 2, RBI/CERT-In, Data Protection.\n\nPrepare and manage audit evidence, observations, closure reports and certification documentation.\n\nAssist with risk assessments:\nMaintain the risk register, risk treatment plans and residual risk reviews.\n\nConduct vendor security due diligence and maintain vendor security records (MSA, NDA, DPA, DPIA, etc.).\n\nSupport privacy & regulatory compliance operations (GDPR/DPDP basics: retention, consent, grievance logging).\n\n4. Access, Asset & Control Assurance\nParticipate in and help automate access reviews, asset inventory checks, and configuration compliance checks.\n\nTrack control performance (vuln SLAs, access reviews, backup tests, etc.) and ensure gaps are documented and closed.\n\nMaintain security awareness and training trackers (onboarding, annual refreshers, phishing simulations).\n\nWhat You’ll Bring\nBachelor’s degree in Computer Science, IT, Cybersecurity or related discipline.\n\n~4 years of experience in security engineering, cloud security, or GRC/compliance (any mix, but must be comfortable hands-on).\n\nGood understanding of:\nSecurity engineering fundamentals: Linux, networking, IAM, encryption, least privilege.\n\nCloud platforms (AWS preferred; GCP/Azure a plus) and their security services.\n\nCore frameworks: ISO 27001, SOC 2, basic risk management and audit lifecycle.\n\nComfortable with:\nWriting/debugging basic scripts (Bash/Python) for automation and data extraction.\n\nTools like Jira, Confluence, Excel/Sheets and at least one GRC / security platform (e.g., Scrut/Drata/Secureframe, etc.).\n\nStrong documentation skills and ability to talk to both engineers and non-technical stakeholders.\n\nPreferred (Good to Have) / Willing to Learn\nCloud security certifications (e.g., AWS Security / AWS Cloud Practitioner).\n\nISO 27001:2022 Lead Auditor/Implementer, CompTIA Security+, ISC2 CC.\n\nExperience with:\nEDR/XDR tools,\n\nCSPM/CNAPP (e.g., Wiz, Prisma, Defender for Cloud),\n\nSIEM, WAF, runtime/container security (Falco, etc.).\n\nExposure to GDPR/DPDP or other data protection regimes.\n\nWho You Are\nYou enjoy both:\nGetting your hands dirty in logs, configs and cloud consoles, and\n\nKeeping things clean in policies, risk registers and audit trackers.\n\nYou’re structured and process-oriented, but still pragmatic and capable of shipping improvements.\n\nYou’re comfortable collaborating with DevOps, backend, data, HR and legal to get security actually implemented, not just written down.\n\nYou want to grow into either Security Engineering leadership (owning tools/architecture) or GRC leadership (owning audits and certifications) over the next few years.\n\nOur Culture\nWe hire self-motivated people and get out of their way\n\nWe value performance, not hours worked\n\nSpeed, ownership, and impact matter most\n\nCompensation\nCompetitive salary + potential equity\n\nHealth benefits, flexible PTO, learning budget","description_format":"text","description_chars":5825,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Fraud Detection","Identity Management"],"lifecycle":[{"event":"open","at":"2026-09-06T11:33:13Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.226,"p_room":0.28,"age_days":315,"expected_fill_days":29,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/bureau-information-security-engineer","json_url":"https://alion.io/job/bureau-information-security-engineer.json","meta":{"generated_at":"2026-10-28T19:11:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26340,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":178276},"rest":"https://alion.io/mcp/rest/get_company?id=178276"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbureau-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbureau-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbureau-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bureau-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbureau-information-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":462960}},{"tool":"search_jobs","arguments":{"company":"bureau.id","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":462960},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}