Information Security Engineer II

Overview

Information Security Engineer II responsible for cybersecurity architecture, threat modelling and security advisory across NCR Atleos projects, with a focus on cloud and AI security.

What you'll do

• Design and maintain cybersecurity architecture using risk criteria and Defence-in-Depth principles
• Perform threat modelling and risk analysis for strategic technology initiatives
• Serve as a software security resource for assigned projects
• Identify and develop new architecture standards for secure cloud and AI adoption
• Quantify business needs to achieve value outcomes and share best practices
• Demonstrate strong leadership in consulting and delivery management, fostering collaboration
• Contribute to global enterprise security and cloud architecture across all service models (IaaS, PaaS, SaaS)
• Maintain broad understanding of security functions (Application Security, IAM, GRC)
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, and identity and access management (IAM)
• Lead gap and control assessment in line with PCI DSS, SOC1/2, NIST or ISO27001 and act as SME for all assessments
• Act as security advisor to various teams in maturing the security posture of applications
• Drive solutions to remediate security vulnerabilities

What you'll need

• Deep knowledge of security principles, frameworks (PCI DSS, NIST, ISO 27001, OWASP), and risk management, and have led framework engagements
• Expertise in AI/Agentic AI, networking, operating systems, data protection, application security, and identity
• Strong understanding of cloud (IaaS, PaaS, SaaS) and on-premises security
• Excellent communication, problem-solving, and leadership skills
• Bachelor's/Master's in a relevant field (Computer Science, Information Systems)
• 3+ years in security and cloud technologies with a focus on architecture

Nice to have

• Certifications such as CISSP, CISM, CRISC
• Expert with PCI DSS, PCI SSF, SOC2, ISO27001, NIST, cybersecurity and IT process solutions, security and risk control frameworks
• Awareness of security and risk management trends, emerging threats, and vulnerabilities
• Experience with databases, endpoint protection, firewalls, intrusion prevention systems, and managing security infrastructure
• Proficiency in application security, cloud, and AI
• Have worked as PCI QSA, PCI ISA or Network Security Architect in previous roles

Details

• Location: Gurgaon, India
• Offers of employment are conditional upon passage of screening criteria applicable to the job