Information Security Engineer

Overview

Information Security Engineer role focused on growing and maturing the Security Operations Centre (SOC) and supporting incident response and security control improvements.

What you'll do

• Analyse security logs, alerts, and reported events and respond to or assist with incident remediation.
• Hunt for potential compromise using threat intelligence sources.
• Report discovered vulnerabilities and recommend remediation steps.
• Support and improve technical security controls.
• Use automation and orchestration to reduce repetitive manual work.
• Develop and improve incident response playbooks and effectiveness reporting for security controls.
• Prepare evidence, coordinate audits, and track audit observations through closure.

What you'll need

• Previous SOC experience and/or 3+ years of hands-on enterprise IT experience managing endpoints and applications on-premises or in the cloud.
• Strong analytical and problem-solving skills.
• Exposure to security controls including identity and access management, vulnerability management, and endpoint detection and response.
• Working knowledge of, or willingness to learn, the Indian regulatory cybersecurity landscape (SEBI CSCRF, exchange circulars, CERT-In), plus familiarity with ISO 27001 and NIST CSF.
• Experience supporting audits (cyber audit, systems audit, VAPT, ISO, or SOC 2 assessments) is stated as a strong plus.
• Automation skills with basic coding or low-code/no-code tools.
• Ability to document clearly and communicate findings into audit-ready evidence and regulator-facing reports.

Details

• Location: Mumbai, India.