{"id":1266265,"url":"https://alion.io/job/jmj-consultants-secops-engineer","title":"SecOps Engineer","company":{"id":3808067,"name":"JMJ Consultants","domain":"jmjconsultants.co.in","url":"https://alion.io/company/jmj-consultants","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":20000,"max_usd":43000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"TypeScript","optional":false},{"name":"LLM","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-09-07T06:22:18Z","employer_posted_date":null,"last_verified_at":"2026-09-07T06:22:18Z","board_verified":false,"closed_at":null,"days_open":47,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":47},"description":"Key Responsibilities : \n\n- Authentication : Stand up and operate authentication flows across all Strike Team projects JWT, AWS Cognito, SSO integrations, and machine-to-machine auth patterns.\n\n- Authorization & Access Controls : Implement role-based and attribute-based access control patterns. Maintain a reusable authorization library that Strike Teams consume rather than rebuild.\n\n- Compliance Implementation : Translate compliance requirements (SOC 2, regional data privacy, customer-driven controls) into concrete technical controls encryption, key management, audit logging, data residency.\n\n- IP & Network Controls : Implement IP restrictions, VPC-level network segmentation, and traffic policies that protect customer data without blocking legitimate Strike Team workflows.\n\n- Security Patterns Library : Build and maintain a library of vetted security components (auth middleware, secret management helpers, audit log clients) that every Strike Team uses by default.\n\n- Security Reviews & Audit Support : Review Strike Team designs for security gaps, support customer audits, and partner with the QA Architect on security-focused testing standards.\n\nKPIs & Success Metrics : \n\n- Security controls implemented across all Strike Team projects (auth, authz, encryption, audit logging) with no critical gaps.\n\n- Reusable security library adoption share of teams consuming vetted components rather than rebuilding.\n\n- Compliance readiness : SOC 2 and data-privacy controls in place; successful customer audit support.\n\n- Time-to-remediate security findings within SLA.\n\n- Zero preventable authentication or access-control incidents.\n\nKey Skills & Experience : \n\n- Education : Bachelors or Masters degree in Computer Science, Cybersecurity, or a related technical field.\n\n- Experience : 8+ years of software engineering experience with a strong focus on security implementation auth systems, compliance controls, or platform security.\n\nTechnical Proficiency : \n\n1. Expert-level knowledge of authentication and authorization patterns (OAuth 2.0, OIDC, JWT, SAML).\n\n2. Hands-on experience with AWS Cognito, IAM, KMS, and Secrets Manager.\n\n3. Strong backend development skills (Python, Java, or TypeScript) this is a hands-on engineering role, not a pure advisory one.\n\n4. Working knowledge of common compliance frameworks (SOC 2, ISO 27001, GDPR) and how to translate them into engineering controls.\n\n5. Familiarity with secure CI/CD patterns and supply-chain security (SBOM, dependency scanning).\n\n- Engineering Excellence : Track record of shipping production-grade security components. Comfortable being a coding security engineer, not just a reviewer.\n\n- Domain Context : (Preferred) Experience in regulated industries (insurance, finance, healthcare) or multi-tenant SaaS.\n\nPreferred Skills & Experience : \n\n- AI Security : Experience securing LLM-based applications prompt injection defenses, output filtering, model access controls.\n\n- Cloud Security : AWS Security Specialty certification or equivalent.\n\n- Guidewire Knowledge : Familiarity with Guidewire Cloud security model.\n\n- Threat Modeling : Hands-on experience running threat modeling sessions for production systems.\nSkills\nSecurity Operations Center, Security, Cloud Security, IT Compliance, OAuth","description_format":"text","description_chars":3267,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-25T22:00:00Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.57,"p_room":0.45,"age_days":47,"expected_fill_days":27,"reasons":["seen:47","win:tail"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/jmj-consultants-secops-engineer","json_url":"https://alion.io/job/jmj-consultants-secops-engineer.json","meta":{"generated_at":"2026-10-25T05:59:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8262,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3808067},"rest":"https://alion.io/mcp/rest/get_company?id=3808067"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjmj-consultants-secops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjmj-consultants-secops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjmj-consultants-secops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jmj-consultants-secops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjmj-consultants-secops-engineer"}]}