{"id":1252989,"url":"https://alion.io/job/equitylist-information-security-associate","title":"Information Security Associate","company":{"id":20582,"name":"EquityList","domain":"equitylist.co","url":"https://alion.io/company/equitylist","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Wellfound","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India","Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11000,"max_usd":31000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"DLP","optional":true}],"status":"live","first_seen_at":"2026-09-11T10:02:23Z","employer_posted_date":null,"last_verified_at":"2026-09-11T10:02:23Z","board_verified":false,"closed_at":null,"days_open":46,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":46},"description":"About EquityList:\n\nEquityList is trusted by 600+ companies to manage their cap table and stock option workflows and compliance. Our comprehensive platform allows customers to manage and administer equity grants - ESOPs, SARs, RSUs, RSAs seamlessly and at scale.\n\nOur customers span APAC, MENA, and the US, including Tata Consumer Products, Taco Bell, Blackbuck, Livspace, Slice, smallcase, Tabby.ai, and Shiprocket - managing equity for 50,000+ stakeholders and stock options worth $3Bn+. We're backed by AngelList India, Hustle Fund, Republic, Unpopular Ventures, Mana Ventures, and a stellar group of angels.\n\nAbout the Role:\n\nAs we deepen our enterprise footprint across regulated markets - onboarding listed companies, fintechs, and compliance-driven clients across three geographies, security has moved from a checkbox to a core trust signal. Clients managing billions in equity on our platform expect us to meet enterprise-grade security standards, and we take that seriously. We're looking for an Information Security Associate who is hands-on, ownership-oriented, and equally comfortable hardening infrastructure and walking a client's CISO through our controls framework. You'll be our first dedicated security hire - which means you own the function, set the baseline, and ensure every enterprise prospect can trust EquityList with their most sensitive equity data.\n\nIdeal Candidate Mindset:\n\nYou've been the only security person in a room full of engineers. You've written the first acceptable use policy and found a critical IDOR on the same day. You care about building systems and processes that outlast you, not just passing audits.\n\nKey Responsibilities:\n\n1. Security Operations:\n\n- Own our day-to-day security posture, access controls, endpoint hardening, secrets management, and cloud security hygiene on GCP. Monitor SIEM alerts, investigate incidents, and lead post-incident reviews with written closure reports.\n\n2. Vulnerability Management:\n\n- Conduct periodic internal assessments and coordinate third-party VAPT engagements. Own the remediation tracker and ensure findings don't die in a spreadsheet.\n\n3. Compliance & ISMS:\n\n- Build and maintain our Information Security Management System - policies, risk registers, vendor assessments, and runbooks. Be the person who actually keeps these updated.\n\n4. Certification Readiness:\n\n- Support readiness for ISO 27001, SOC 2 Type II, and GDPR (EU) - maintaining evidence artefacts, coordinating with auditors, and closing gaps proactively.\n\n5. Client-Facing Trust Building:\n\n- Own our Infosec response library for enterprise RFPs, DDQs, and security annexures. Represent EquityList on client InfoSec calls with clarity and confidence.\n\n6. Product and Application Security:\n\n- Work with the engineering team on secure design reviews, threat modelling, and pre-release security checks - bringing security into the SDLC, not just after the fact.\n\n7. Bug Bounty/Responsible disclosure programs:\n\n- Take ownership of initiating and managing bug bounty programs.\n\n8. Cross-functional Collaboration:\n\n- Partner with Product, Compliance, and Business teams to translate security requirements into practical, executable controls without becoming a blocker.\n\nRequirements:\n\nTechnical:\n\n- 2 - 3 years in an InfoSec, security engineering, or GRC + technical hybrid role. Ideally, at a SaaS or fintech company.\n\n- Working knowledge of GCP security - IAM, VPC service controls, Cloud Armor, Security Command Center, Cloud Logging, and alerting.\n\n- Familiarity with OWASP Top 10, common vulnerability classes, and the ability to triage scanner output.\n\n- Experience writing security policies, ISMS documentation, and risk registers - not just reading templates.\n\n- Scripting ability (Python or Bash) for automating checks or log analysis is a plus.\n\nSoft Skills:\n\n- Strong written communication, you can translate technical risk into plain language for a founder, a CFO, or a client's legal team.\n\n- Documentation-first mindset, you close loops and keep records clean without being reminded.\n\n- Startup-ready, comfortable with ambiguity, proactive about gaps, and able to wear multiple hats.\n\nEducation:\n\n- B.E. / B.Tech in Computer Science, IT, or related field - or equivalent practical experience.\n\n- CompTIA Security+, CEH, or Google's Professional Cloud Security Engineer certification is a plus.\n\nGood to Have:\n\n- Hands-on involvement in ISO 27001 implementation or audit support.\n\n- SOC 2 Type II readiness experience.\n\n- VAPT coordination with third-party vendors.\n\n- Awareness of India's DPDP Act and IT Act obligations.\n\n- Prior experience at a B2B SaaS or fintech startup.\n\n- Hands-on experience with DLP, MDM, or SIEM tooling.\n\n- Build from scratch: You're EquityList's first security hire, you write the playbook, choose the tools, and define what security culture looks like here. No bureaucracy, full ownership.\n\n- Work at the intersection of security and growth: At our stage, security directly enables revenue. You'll co-own enterprise onboarding conversations, influence product architecture, and build relationships with CISOs and CFOs at India's fastest-growing companies.\nSkills\nIT Security Strategy, Security Tools, Security Protocols, Security Operations Center, SIEM, Vulnerability Management, IT Compliance, ISMS, Python, Bash Scripting, IT Audit","description_format":"text","description_chars":5325,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Stock options"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Custody & Fund Administration","HR & Payroll Software"],"lifecycle":[{"event":"open","at":"2026-09-25T18:04:06Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.414,"p_room":0.36,"age_days":46,"expected_fill_days":24,"reasons":["seen:46","velocity","win:tail","crowd:junior"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/equitylist-information-security-associate","json_url":"https://alion.io/job/equitylist-information-security-associate.json","meta":{"generated_at":"2026-10-28T09:29:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12439,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20582},"rest":"https://alion.io/mcp/rest/get_company?id=20582"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fequitylist-information-security-associate"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fequitylist-information-security-associate"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fequitylist-information-security-associate"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/equitylist-information-security-associate\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fequitylist-information-security-associate"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1252989}},{"tool":"search_jobs","arguments":{"company":"equitylist.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1252989},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}