Security Engineer

Hi,

Greetings from Peoplefy Infosolutions !!!

We are hiring for one of our reputed MNC client based in Pune.

We are looking for candidates with 6+ years of experience.

Job Description:

• Automation & GRC Engineering: Support the Senior Architects by building and maintaining API integrations between our tech stack and Sprinto. Your goal is to eliminate manual evidence collection by writing automation (Python/Go) that feeds real-time configuration data from GCP, GitHub, and CrowdStrike into the GRC platform.
• SIEM/SOAR Implementation (GCP SCC): Perform the technical setup and tuning of GCP Security Command Center. Build and maintain the automated "Playbooks" that allow our systems to self-remediate common security events (e.g., auto-isolating a compromised GKE pod).
• Zero-Trust & Identity Operations: Execute the technical rollout of Ploy (JIT). Manage the day-to-day health and tuning of our Twingate (ZTNA) connectors and JumpCloud policies to ensure seamless, secure access for a global team.
• Shift-Left & CI/CD Tuning: Maintain security scanners (SAST/DAST) within GitHub Actions. Work directly with developers to tune SonarCloud rules, reducing false positives and ensuring that the "Shift-Left" process is high-fidelity and low-friction.
• Operational Defense & MDR Support: Act as the primary technical responder for escalations from our CrowdStrike MDR service. Perform hands-on remediation, containment, and forensic investigation within the GCP environment.
• Resilience & DRP Execution: Build and maintain the automation scripts used for Disaster Recovery (DRP) failover. Lead regular "Game Day" exercises to ensure that our recovery procedures are functional, documented, and meet RTO/RPO targets.
• Automation Rate: Percentage of GRC evidence collected automatically via Sprinto APIs vs. manual uploads (Target: >80% of technical controls).
• Mean Time to Remediate (MTTR): Tracking the speed of resolving critical vulnerabilities identified by SonarCloud or GCP SCC.
• Tool Coverage: Ensuring 100% deployment of CrowdStrike and Twingate across all relevant endpoints and cloud workloads.
• DRP Readiness: Successful execution of technical recovery playbooks during scheduled Disaster Recovery tests.

Interested candidates for above position kindly share your CVs on [email protected] with below details -

• Experience :
• CTC :
• Expected CTC :
• Notice Period :
• Location :