Information Security Engineer

Location: Bangalore

Experience: 2 - 5 Years

Job Type: Employee

Openings: 1

Experience: 2 to 4 Years Location: Bangalore

The Information Security Group (ISG) under the CISO's Office is responsible for ensuring Security and Privacy across all internal and client-facing business operations. ISG focuses on strengthening the organization's security posture through governance, risk management, compliance, security architecture, and cybersecurity operations.

The team works collaboratively with stakeholders across the organization to provide assurance that confidential information is handled securely while meeting business objectives.

ISG comprises two key functions:

Cyber Security Governance, Risk & Compliance (GRC)

Cyber Security Technical Operations (TechOps)

We are looking for a highly motivated Security Architecture Analyst to join the Security Architecture (SecArch) team within TechOps. The role involves supporting security architecture initiatives, developing and maintaining security standards, assessing technical security controls, and contributing to the organization's overall cybersecurity maturity.

The ideal candidate should have hands-on exposure to cybersecurity technologies, cloud security concepts, and enterprise security architecture principles.

Assist in developing, maintaining, and updating technical security standards, including hardening, encryption, and security baseline standards.

Support the creation and maintenance of security architecture frameworks, guidelines, and artifacts.

Review IT, cloud, and infrastructure changes to ensure alignment with security architecture requirements.

Track, manage, and review security exceptions, ensuring appropriate governance and timely closure.

Conduct technical security assessments and due diligence for third-party vendors, products, and services.

Participate in identifying security gaps and recommending mitigation measures across the organization.

Support security engineering initiatives and implementation of cybersecurity technologies.

Collaborate with vendors throughout solution evaluation, PoCs, implementation, upgrades, and operational support.

Assist in monitoring emerging cyber threats and recommend security improvements where necessary.

Work closely with infrastructure, cloud, network, and application teams to strengthen the organization's cybersecurity posture.

Contribute to security reporting, control effectiveness reviews, and continuous improvement initiatives.

Support cybersecurity budget planning, tracking, and reporting activities.

2 to 4 years of experience in Information Security, Cyber Security, Security Architecture, or Security Engineering.

Good understanding of cybersecurity technologies such as: EDR/XDR SIEM & SOAR CASB & SASE WAF & Firewalls PAM/PIM UEBA Threat Hunting Anti-DDoS & ASM Solutions

EDR/XDR

SIEM & SOAR

CASB & SASE

WAF & Firewalls

PAM/PIM

UEBA

Threat Hunting

Anti-DDoS & ASM Solutions

Basic understanding of Enterprise Security Architecture and Cyber Resilience concepts.

Familiarity with Cloud Security fundamentals across Azure, AWS, or GCP.

Knowledge of securing networks, servers, cloud environments, virtualization platforms, applications, and endpoint systems.

Understanding of security risk management and technical control implementation.

Awareness of current cyber threat trends and security best practices.

Exposure to one or more of the following frameworks and standards:

ISO 27001

NIST Cyber Security Framework (CSF)

NIST 800-53

PCI DSS

SOC 1 / SOC 2

HIPAA

SOX Controls

ISO 22301

Bachelor's degree in Engineering, Computer Science, Information Technology, Cyber Security, or equivalent.

CISSP

CISM

CCSP

ISO 27001 Lead Implementer / Lead Auditor

Microsoft Azure Security Certifications

AWS Security Certifications

Google Cloud Security Certifications

Strong analytical and problem-solving skills.

Excellent communication and stakeholder management abilities.

Attention to detail and strong documentation skills.

Ability to work independently and collaboratively in a fast-paced environment.

Continuous learner with a passion for cybersecurity.

Self-driven, proactive, and innovative mindset.