Information Security Analyst

Euromonitor International; Bengaluru; On-site; INR 600,000 - 900,000; Full time

Benefits offered by this job

Private health insurance

Generous holiday allowances

Training and development

Job summary

Euromonitor International is seeking a Software Engineer to join the Information Security and Compliance team in Bengaluru. You will work across security disciplines, performing code reviews, vulnerability management and risk assessments while growing your expertise.

You will collaborate with Architecture, Engineering, IT, Legal, Procurement and Sales, and be supported to pursue relevant professional certifications as you develop in your role.

Qualifications

• 1–2 years of professional experience in software engineering, development or a closely related technical role.
• A bachelor’s degree in Computer Science, Software Engineering, Cyber Security or a related field.
• Proficiency in at least one programming or scripting language, such as Python, JavaScript, TypeScript, C#, Java, Go or PowerShell.
• A solid understanding of the software development lifecycle, Git or another version-control system, APIs and web application fundamentals, including HTTP, authentication, authorisation and session management.
• The ability to read code, recognise common insecure patterns and demonstrate awareness of common vulnerability classes such as the OWASP Top 10.
• Strong organisation, attention to detail and the ability to manage multiple priorities, take ownership and elevate concerns appropriately.
• Clear written and verbal communication skills, with the confidence to explain technical risks to both technical and non-technical stakeholders.
• Adaptability, sound judgement, discretion and a collaborative approach when handling sensitive information.

Responsibilities

• Review application code, architecture, APIs, dependencies and third-party integrations for security weaknesses, then provide clear, practical recommendations.
• Triage findings from static analysis, dependency scanning and related tools, and work with developers to track remediation through to completion.
• Support internal and third-party penetration testing, including scoping, scheduling, supervised web application and API testing, and remediation tracking.
• Run vulnerability scans, assess findings by risk, maintain accurate records and follow up with system owners.
• Complete security assessments for suppliers, software, tools and services, including AI-enabled tools and services connecting to company data.
• Support vendor onboarding, customer security questionnaires, audits and evidence gathering for standards such as ISO 27001 and Cyber Essentials.
• Learn to review security and data protection provisions in customer and supplier contracts, escalating risks to Legal, Procurement and senior security colleagues.
• Coordinate security projects, assessments and questionnaires by tracking owners, actions, risks, deadlines, metrics and status updates.
• Monitor cyber security queues, assist with alert and phishing triage, and support security tooling, user access reviews and awareness initiatives.
• Use scripting and development skills to automate evidence collection, reporting, ticket workflows and data analysis, and build lightweight tools or dashboards.
• Contribute to secure development guidance, security documentation and the continuous improvement of processes and controls.

Skills

Software engineering

Cyber security

Programming languages

Education

Bachelor's degree in CS/Software/Cyber Security

Tools

Burp Suite

CI/CD tools

Azure

GCP

Microsoft 365

Job description

Job Description:

About Euromonitor

Euromonitor International leads the world in data analytics and research into markets, industries, economies and consumers. We provide truly global insight and data on thousands of products and services; we are the first destination for organizations seeking growth. With our guidance, our clients can make bold, strategic decisions with confidence.

Overview of the role:

This is an opportunity for a software engineer to begin or accelerate a career in information security. You will join the Information Security and Compliance team and apply your engineering skills to practical cyber security work, including software security reviews, vulnerability management, penetration testing, risk assessments, automation, cloud configuration reviews and security administration.

The role is designed to build broad, hands-on experience across security, cyber and compliance disciplines while allowing you to use and deepen your technical specialism. You will work with colleagues across Architecture, Engineering, IT, Legal, Procurement, Compliance and Sales, so the ability to communicate technical risks clearly to non-technical audiences is essential.

Your development will be planned with your manager and reviewed regularly. As your knowledge and confidence grow, you will take on greater ownership and independence, with support to work towards relevant professional certifications.

What you’ll do

• Review application code, architecture, APIs, dependencies and third-party integrations for security weaknesses, then provide clear, practical recommendations.
• Triage findings from static analysis, dependency scanning and related tools, and work with developers to track remediation through to completion.
• Support internal and third-party penetration testing, including scoping, scheduling, supervised web application and API testing, and remediation tracking.
• Run vulnerability scans, assess findings by risk, maintain accurate records and follow up with system owners.
• Complete security assessments for suppliers, software, tools and services, including AI-enabled tools and services connecting to company data.
• Support vendor onboarding, customer security questionnaires, audits and evidence gathering for standards such as ISO 27001 and Cyber Essentials.
• Learn to review security and data protection provisions in customer and supplier contracts, escalating risks to Legal, Procurement and senior security colleagues.
• Coordinate security projects, assessments and questionnaires by tracking owners, actions, risks, deadlines, metrics and status updates.
• Monitor cyber security queues, assist with alert and phishing triage, and support security tooling, user access reviews and awareness initiatives.
• Use scripting and development skills to automate evidence collection, reporting, ticket workflows and data analysis, and build lightweight tools or dashboards.
• Contribute to secure development guidance, security documentation and the continuous improvement of processes and controls.

What we’re looking for:

You will bring a strong software engineering foundation, genuine curiosity about cyber security and the motivation to develop across multiple security disciplines.

• 1–2 years of professional experience in software engineering, development or a closely related technical role.
• A bachelor’s degree in Computer Science, Software Engineering, Cyber Security or a related field.
• Proficiency in at least one programming or scripting language, such as Python, JavaScript, TypeScript, C#, Java, Go or PowerShell.
• A solid understanding of the software development lifecycle, Git or another version-control system, APIs and web application fundamentals, including HTTP, authentication, authorisation and session management.
• The ability to read code, recognise common insecure patterns and demonstrate awareness of common vulnerability classes such as the OWASP Top 10.
• Strong organisation, attention to detail and the ability to manage multiple priorities, take ownership and elevate concerns appropriately.
• Clear written and verbal communication skills, with the confidence to explain technical risks to both technical and non-technical stakeholders.
• Adaptability, sound judgement, discretion and a collaborative approach when handling sensitive information.

Useful but not essential: hands‑on exposure to Burp Suite, capture‑the‑flag events, bug bounty programmes or personal security projects; CI/CD and security scanning tools; Azure, GCP, Microsoft 365 or Entra ID; vulnerability management, EDR or third-party risk tools; and an interest in ISO 27001, Cyber Essentials, GDPR, contracts and risk management.

Certifications: Security+, CEH, eJPT, PNPT or Burp Suite Certified Practitioner would be advantageous but are not required. The successful candidate will be supported in working towards relevant certifications as part of their development plan.

Why work for Euromonitor?

Our Values:

We seek individuals who act withintegrity

We look for candidates who arecuriousabout the world

We feel that as a community, we’re strongertogether

We seek toenable people to feelempowered

We welcome candidates who bring strength indiversity

International:We have a multinational workforce and communicate daily across our 16 global offices.

Hardworking and Sociable:Our staff balance hard work with enjoyment, offering flexible hours and regular social events, including after-work meetups, summer and Christmas parties.

Committed to Making a Difference:Our Corporate Social Responsibility Programme provides two volunteering days annually; donation amounts for new starters and supports local and international charities through various initiatives.

Excellent Benefits:We offer competitive salaries, private health insurance, and generous holiday allowances, amongst much more!

Opportunities to Grow:We provide extensive training and development, promoting from within and across departments, and rewarding talent.

Equal Employment Opportunity:Euromonitor International does not discriminate based on race, colour, religion, sex, national origin, political affiliation, sexual orientation, gender identity, marital status, disability, genetic information, age, membership in an employee organization, or other non-merit factors.