Information Security Engineer

Angel and Genie; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A prominent cybersecurity firm in Bengaluru is seeking an Information Security Engineer to implement and manage the organization's information security strategy, policies, and programs. You will play a critical role in safeguarding data and ensuring compliance with regulations. The ideal candidate should have at least 5 years of experience in cybersecurity, relevant certifications like CISSP, and strong knowledge of security technologies. The role offers a collaborative environment with a focus on proactive incident response and risk management.

Qualifications

• Minimum of 5 years of experience in information security.
• In‑depth knowledge of cybersecurity best practices and frameworks.
• Strong understanding of data protection and privacy laws.

Responsibilities

• Implement information security policies and programs.
• Conduct regular security risk and vulnerability assessments.
• Monitor response to security incidents and breaches.

Skills

Incident response

Threat detection

Security monitoring

Vulnerability management

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Master's degree (preferred)

Tools

SIEM tools (e.g. Sentinel, Splunk)

CSPM tools (e.g. Wiz, Orca)

Cloud security (AWS, Azure, Google Workspace)

Job description

As the Information Security Engineer, you will be responsible for implementing the enterprise-wide information security strategy, policies, and programs. You will play a critical role in safeguarding our organisation's data, systems, and assets while ensuring compliance with relevant regulations and standards.

Responsibilities

• Enforce information security policies, standards, and procedures to ensure compliance with applicable regulations and industry best practices.
• Monitor and assess compliance with security policies and standards across the organisation.
• Conduct regular security risk assessments and vulnerability assessments.
• Perform the day‑to‑day operations of the cybersecurity team, including incident response, threat detection, and security monitoring.
• Implement and manage security technologies, tools, and solutions to protect the organisation's assets.
• Collaborate with IT and other departments to ensure the integration of security measures into all business processes and systems.
• Monitor response to security incidents, breaches, and data breaches, ensuring a timely and effective resolution.
• Develop and maintain an incident response plan and coordinate with external incident response teams, if necessary.
• Conduct post‑incident analysis to identify lessons learned and areas for improvement.
• Monitor and enhance the end‑to‑end vulnerability management lifecycle, including continuous scanning, risk‑based prioritization, remediation tracking, and executive reporting across cloud, infrastructure, and application environments.
• Define and enforce vulnerability remediation SLAs and governance, collaborating with engineering and DevOps teams to drive timely fixes, integrate security into CI/CD pipelines, and reduce overall organisational risk exposure.
• Promote a culture of security awareness and education throughout the organisation.
• Provide training and awareness programs to employees, contractors, and stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field (Master's degree preferred).
• Relevant industry certifications such as CISSP, CISM, or CISA.
• Minimum of 5 years of experience in information security.
• In‑depth knowledge of cybersecurity best practices, standards, and frameworks like HITRUST, NIST, SOC 2.
• Strong understanding of applicable data protection and privacy laws especially HIPAA.
• Working knowledge of any leading SIEM tool like Sentinel/Splunk.
• Working knowledge of any CSPM tool like Wiz/Orca.
• Be able to configure and monitor Security and Data Protection in cloud providers like AWS, Azure and Google Workspace.
• Excellent communication, leadership, and problem‑solving skills.
• Proven ability to collaborate with cross‑functional teams and senior executives.