Information Security Engineer

Traydstream; Gurugram District; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Traydstream is seeking an Information Security Engineer to implement and improve security controls across cloud infrastructure, SaaS applications and internal enterprise systems. This is a hands-on role focused on cloud security, application security, identity controls, vulnerability management, security monitoring and practical remediation support.

You will collaborate with Engineering, DevOps, IT and Compliance to remediate risks, automate security checks, and strengthen monitoring with

Qualifications

• 5–8 years of hands-on information security engineering experience in SaaS/tech or regulated environments.
• Azure security experience including IAM, logging, data protection and secure configuration.
• Knowledge of OWASP Top 10, API security and secure SDLC.
• Experience with Microsoft Entra ID, MFA, Conditional Access and Microsoft 365 security.
• Security operations experience with incident response and log analysis.
• Automation skills with PowerShell or Python to automate security tasks.
• Awareness of AI security for AI/ML workloads and related controls.
• Certifications such as Azure Security Engineer Associate or equivalent preferred.
• Clear communicator with ability to deliver practical security outcomes across priorities.

Responsibilities

• Implement and improve security controls across multi-cloud environments and enterprise platforms.
• Support cloud and application security reviews, identify gaps and drive remediation.
• Embed security into the SDLC with secure design, testing and remediation.
• Review risks from scans, pentests and client findings.
• Strengthen identity, endpoint, email and privileged access security.
• Monitor alerts, investigate events and support incident response using SIEM/EDR.
• Improve detection rules, dashboards, playbooks and repeatable workflows.
• Automate routine security checks and reporting using scripting tools.
• Secure AI/ML workloads and use AI-driven security workflows.
• Collaborate with Engineering, DevOps, IT, Product and Compliance for timely remediation.

Skills

Azure IAM

Application security

Identity security

Security operations

Automation (PowerShell, Python)

AI security

Vulnerability management

OWASP Top 10

Security monitoring

Communication & collaboration

Job description

Job Description

Traydstream is seeking an Information Security Engineer to implement and improve security controls across cloud infrastructure, SaaS applications and internal enterprise systems. This is a hands-on individual contributor role focused on cloud security, application security, identity controls, vulnerability management, security monitoring and practical remediation support.

Responsibilities

• Implement and improve security controls across Multi cloud environments, production systems and internal enterprise platforms.
• Support cloud and application security reviews, identify security gaps and work with teams to drive practical remediation.
• Embed security into the SDLC by supporting secure design, application security testing and vulnerability remediation.
• Review application, API and infrastructure risks arising from internal scans, penetration tests and client security findings.
• Strengthen enterprise security across identity, endpoint, email, Microsoft 365 and privileged access controls.
• Monitor security alerts, investigate events and support incident response using SIEM, EDR, cloud and identity security tools.
• Improve detection rules, dashboards, playbooks and repeatable workflows to enhance monitoring and response quality.
• Automate routine security checks, reporting and control validation using PowerShell, Python or similar scripting tools.
• Secure AI/ML workloads and use AI-driven approaches to streamline security reviews, monitoring, reporting and remediation workflows.
• Work with Engineering, DevOps, IT, Product and Compliance teams to communicate risks clearly and support timely remediation.

Your Skills And Experience

• Experience: 5 to 8 years of hands-on information security engineering experience, preferably in SaaS, technology or regulated environments.
• Cloud security: Practical experience securing Azure environments, including IAM, network security, logging, secure configuration and data protection.
• Application security: Working knowledge of OWASP Top 10, API security, secure SDLC, application testing and vulnerability remediation.
• Identity and enterprise security: Hands-on experience with Microsoft Entra ID, MFA, Conditional Access, endpoint security, Microsoft 365 security and privileged access controls.
• Security operations: Ability to investigate alerts, analyse logs, tune detections and support incident response.
• Automation: Ability to use PowerShell, Python or similar scripting languages to automate security tasks and reporting.
• AI security: Practical awareness of securing AI/ML workloads, protecting sensitive data and using AI securely to improve security workflows.
• Certifications: Azure Security Engineer Associate, Security Operations Analyst Associate, CISSP, CCSP, Security+ or equivalent certification is preferred.
• Communication and execution: Clear communicator, self-driven, detail-oriented and able to deliver practical security outcomes across multiple priorities.