Information Security Engineer

Information Security Engineer

Mumbai (On-site) | Full-time | Experience: 36 years

About the role

We're looking for a hands-on security professional to own the security of our internal systems, enterprise data and client data. You'll protect our infrastructure, investigate incidents, run regular security audits and build a security-aware culture across the team.

Key responsibilities

• Secure internal systems, servers, cloud environments and networks against unauthorized access and threats
• Implement and manage privileged access (PAM), role-based access controls and least-privilege policies
• Secure logins and identities through MFA, SSO, password policies and account lifecycle management
• Protect enterprise, company and client data through encryption, DLP controls, backups and data classification
• Deploy and manage endpoint security (EDR/antivirus, device management, patching) across all laptops, desktops and mobile devices
• Conduct security investigations, monitor logs and alerts, and perform root-cause analysis of incidents
• Run periodic security checkups, including vulnerability assessments, configuration reviews and access audits
• Lead incident response for data breaches: contain, mitigate, document and prevent recurrence
• Prevent data theft and data loss through monitoring, DLP and insider-threat controls
• Train employees on security best practices, phishing awareness and data handling policies
• Maintain security policies and support compliance with the DPDP Act 2023 and client security requirements

Requirements

• 3-6 years in information security, IT security or SOC roles
• Strong knowledge of IAM, PAM, endpoint security, SIEM and DLP tools
• Experience with Microsoft 365/Azure AD, Google Workspace or AWS security
• Hands-on experience with incident response and vulnerability assessment
• Understanding of data protection regulations (DPDP Act, GDPR, ISO 27001)
• Ability to explain security clearly to non-technical staff

Good to have

• Certifications: CEH, CompTIA Security+, CISSP, ISO 27001 LA or OSCP
• Experience at a data, SaaS or B2B services company

What we offer

• Ownership of the company's entire security function