Data Security Engineer Chandigarh On-site

XenonStack; Mohali; Presencial; INR 1.200.000 - 1.700.000; Jornada completa

Descripción de la vacante

XenonStack Mohali is seeking a Data Security Engineer to protect enterprise data platforms across cloud and on-prem environments. The role focuses on access controls, encryption, auditing and security governance for Cloudera, Oracle and Alation within a large-scale data platform.

You will collaborate with DataOps, DevOps and client security teams, implement AWS IAM/KMS controls, monitor logs, respond to incidents and ensure compliance with RBI/ISO guidelines in a regulated setup.

Formación

• 2–4 years of data security experience in enterprise environments.
• Proficient in AWS IAM, KMS, secrets management and audit logging.
• Knowledge of data governance and compliance requirements (ISO 27001, RBI/SEBI guidance).
• On-site Mohali location and willingness to work with client teams.

Responsabilidades

• Manage data access controls across Cloudera, Oracle and Alation.
• Implement and monitor AWS security controls (IAM, KMS, logging).
• Maintain data protection measures (encryption at rest/in transit).
• Support audit readiness and respond to audit queries.
• Monitor security events and investigate access anomalies.
• Define and enforce access policies with data governance standards.
• Review platform configurations for security gaps and remediation.
• Coordinate with DataOps, DevOps and client security teams.

Conocimientos

AWS security

Access management

Security controls

Audit compliance

Linux fundamentals

Educación

B.E./B.Tech./MCA or equivalent

Herramientas

Cloudera Ranger

Oracle security

Alation access governance

AWS CloudTrail

Descripción del empleo

Job Description:

DATA SECURITY ENGINEER (CHANDIGARH, ON-SITE)

Location: XenonStack office, Sector 75, STPI, Mohali (Chandigarh Tricity), on-site

Experience: 2–4 years | Joining: Immediate | Employment: Full time, XenonStack Private Limited

ABOUT XENONSTACK

XenonStack is a Data and AI Foundry for Agentic Systems, enabling enterprises to design, deploy, operate, and scale intelligent agents across digital and physical environments. We build enterprise-grade platforms across the agentic stack:

• Akira AI - Reasoning and agent orchestration.
• ElixirData - Agentic analytics intelligence. Explainable, decision-centric analytics for measurable business outcomes.
• NexaStack - Agentic infrastructure automation. Secure, compliant AI deployment across cloud, edge, and on-prem.
• MetaSecure - Trust, compliance and defense. Continuous assurance with AI-BOMs, risk scoring, and agentic security.

Our mission is to accelerate the worlds transition to AI + Human Intelligence by making agentic systems reliable, responsible, and enterprise-ready.

ABOUT THE ENGAGEMENT

We are building a Managed Services team to support a large-scale enterprise data platform. The platform spans Cloudera on AWS, an on-premises Oracle data warehouse, Oracle GoldenGate replication, Apache Spark for ETL and data processing, and Alation for data governance.

ROLE MISSION

Protect the enterprise data platform by managing access, encryption, auditing and security controls across cloud and on-premises systems, in line with regulatory expectations.

KEY RESPONSIBILITIES

• Manage data access controls, role-based access and access reviews across Cloudera, Oracle and Alation.
• Implement and monitor AWS security controls: IAM, KMS encryption, secrets management and logging.
• Maintain data protection measures such as encryption at rest and in transit, masking and key management.
• Support audit, compliance and regulatory requirements; prepare evidence and respond to audit queries.
• Monitor security events, investigate access anomalies and support incident response.
• Define and enforce access policies aligned with data governance standards.
• Review platform configurations for security gaps and recommend remediation.
• Coordinate with the Mumbai DataOps and DevOps teams and the client security team on security changes.

REPORTING

Reports to the Managed Services delivery lead and works closely with XenonStacks CISO and the clients security team.

HOW WE WORK WITH AI

AI is part of the daily workflow at XenonStack, not an add-on.

• At our Mohali/Chandigarh office, AI tools are open for use: log and configuration analysis, policy and access-review drafting, audit evidence preparation and documentation.
• When working on the clients platform, you follow the clients compliance and information security policy: use only client-approved tools, and never put client data, logs, credentials or configurations into any tool the client has not approved.
• Every AI-assisted output is verified by you before it is relied on or shared.
• Come ready to talk about what is in your AI stack, how you verify its output, and how you keep it compliant in a regulated environment.

WHAT SUCCESS LOOKS LIKE

• Access reviews completed on schedule, with no unexplained privileged access.
• No audit finding left open past its agreed remediation date.
• Audit evidence ready on request, complete and traceable.
• No data exposure incidents; anomalies detected, contained and reported quickly.

MUST-HAVE SKILLS

• AWS security: IAM, KMS, secrets management, CloudTrail and audit logging
• Access management and data protection practices
• Security controls across cloud and on-premises data platforms
• Audit and compliance requirements and access policy management
• Linux fundamentals

GOOD-TO-HAVE SKILLS

• Cloudera security (Ranger, Kerberos), Oracle database security, Alation access governance
• Knowledge of RBI/SEBI guidelines, ISO 27001 and the DPDP Act
• Certifications such as CISSP, CISM, CEH or AWS Security Specialty

CANDIDATE PROFILE

• B.E./B.Tech/MCA or equivalent
• Experience in data or infrastructure security in an enterprise, preferably in a regulated industry
• Strong documentation, audit-readiness and stakeholder communication skills

HIRING PROCESS

Pre-screening assessment (about 10 minutes, at application) → Technical interview → Face-to-face technical assessment at our Mohali office → HR and Leadership round → Background verification → Offer.

TERMS

• Location: on-site at our Mohali (Chandigarh Tricity) office, working on the clients platform under the clients security controls.
• Immediate joining.
• Regulated production environment; background verification (BGV) is mandatory.
• Support model: 16x5 core support with P1 24x7 on-call, on a rotational basis, as per the clients support model.
• Travel to the client in Mumbai may be required occasionally.
• Compensation as per company policy and budget band.

HOW WE WORK

We value deep work, clarity, and execution over activity. You will be expected to clarify, plan, execute, and **escalate** with options, not wait to be told. Ownership sits with the individual, and outcomes are measured, not effort.

OUR VALUES

• Agency - Be self-directed and proactive
• Taste - Sweat the details and build with precision
• Ownership - Take responsibility for outcomes
• Mastery - Commit to continuous learning and growth
• Impatience - Move fast and challenge inertia
• Customer Obsession - Always put the customer first

WHY JOIN US

• Secure a large-scale enterprise data platform.
• AI-first environment: work alongside the agentic platforms we build.
• Great Place to Work-Certified, 14+ years, headquartered in Mohali.