Cybersecurity -II

Upstox; Bengaluru Urban; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Upstox is seeking a Cybersecurity Engineer-II in Bengaluru to own and execute security initiatives from identification through implementation and closure. You will investigate and respond to security incidents, assess risks across applications, APIs, cloud, and infrastructure, and drive remediation with engineering teams.

You will monitor SIEM/EDR/XDR, conduct threat hunting, and improve detections and incident response processes, partnering with Cloud, DevOps, and Product teams to strengthen

Qualifications

• 5+ years of experience in Cybersecurity / Information Security / Security Engineering.

Responsibilities

• Own and execute cybersecurity initiatives from identification through implementation and closure.

Skills

Cybersecurity

Security Operations

Incident Response

Threat Detection

Analytical Thinking

Communication

Stakeholder Management

Tools

Palo Alto

IBM QRadar

CrowdStrike

Cortex XDR

Trend Micro

BeyondTrust

IBM PAM

One Identity

SIEM

EDR/XDR

Job description

About Upstox

At Upstox, we’re building the future of investing — simple, powerful, and for everyone. We're one of India’s fastest-growing fintech platforms, backed by the best in the business, including Mr. Ratan Tata and Tiger Global, and on a mission to make wealth creation accessible to every Indian. From first-time investors to seasoned traders, millions trust us to power their financial journeys. We're not just moving fast — we’re moving with purpose. If you thrive in a high-energy, high-impact environment, you're in the right place.

About the role

Job Title: Cybersecurity Engineer-II

Location: Bangalore

Work Arrangement: Full-time

Experience: 5+ years

What You'll Do

• Own and execute cybersecurity initiatives from identification through implementation and closure.
• Investigate and respond to security incidents, alerts, and potential threats across the organization.
• Identify and mitigate security risks across applications, APIs, cloud, infrastructure, and internal systems.
• Conduct security assessments, vulnerability assessments, and security reviews.
• Monitor and analyze security events across SIEM, EDR/XDR, firewalls, and other security platforms.
• Develop and improve security detections, monitoring use cases, and incident response processes.
• Perform threat hunting, IOC analysis, and root-cause investigations.
• Partner with Engineering, DevOps, Cloud, Infrastructure, and Product teams to drive security remediation and Support security architecture reviews, audits, compliance, and security improvement initiatives.

What We're Looking For

• 5+ years of experience in Cybersecurity / Information Security / Security Engineering.
• Strong hands-on experience in one or more areas such as Cyber Defence, Security Operations, Incident Response, Vulnerability Management, Cloud Security, or Infrastructure Security.
• Experience with SIEM, EDR/XDR, firewalls, vulnerability management, and security monitoring tools.
• Strong understanding of networking, authentication, authorization, APIs, endpoint security, and common attack techniques.
• Experience investigating and responding to security incidents and threats.
• Good understanding of MITRE ATT&CK, IOC analysis, and threat detection.
• Experience working with cloud environments, preferably AWS.
• Familiarity with security frameworks such as NIST, ISO 27001, or CIS.
• Ability to independently own security initiatives, solve complex security problems, and drive remediation to closure.
• Strong analytical, problem-solving, communication, and stakeholder-management skills.

Good to Have

• Experience in FinTech, Banking, Payments, or other regulated industries.
• Exposure to DevSecOps, CI/CD security, SOAR, CSPM, threat hunting, or security automation.
• Experience with Palo Alto, IBM QRadar, CrowdStrike, Cortex XDR, Trend Micro, BeyondTrust, IBM PAM, or One Identity.
• Knowledge of Python, PowerShell, or Bash.
• Certifications such as CISSP, OSCP, GCIH, GCIA, CEH, Security+, or equivalent.

Why This Role Rocks

Work on cybersecurity at the scale of a high-growth fintech platform, collaborate with experienced Cybersecurity and Technology teams, and gain hands-on exposure across multiple security domains while directly contributing to strengthening Upstox's overall security posture.

By applying for this position, you acknowledge that you have reviewed our Prospective Employee Privacy Notice, which outlines how Upstox collects, uses, and protects your Personal Information ("PI"). I accept Upstox's Prospective Employee Privacy Notice. Upstox is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other characteristics.