Information Security Engineer

imc; Mumbai; On-site; INR 1,600,000 - 2,300,000; Full time

Job summary

IMC Trading is seeking an Information Security Engineer to mature its Security Operations Centre in Mumbai. You will analyze logs, hunt threats, and support audits while expanding security controls across on-premises and cloud environments.

The role emphasizes automation, AI-assisted tooling, responsible for evidence and regulator-facing reports, and improving incident response playbooks within a fast-paced trading firm.

Qualifications

• Bachelor's degree or equivalent in information systems or computer science.
• Security experience including audits or regulatory compliance is a strong plus.
• Hands-on experience with enterprise IT environments and security controls.

Responsibilities

• Analyse security logs, alerts and events; respond to incidents.
• Hunt for threats using threat intel sources.
• Report vulnerabilities to owners; recommend remediations.
• Support and improve technical security controls.
• Leverage automation to reduce manual work.
• Apply AI-assisted tooling to triage alerts and investigations.
• Develop reports to measure security controls effectiveness.
• Develop and improve incident response playbooks.
• Support regulatory and assurance audits: prepare evidence and coordinate with auditors.

Skills

Analytical skills

Problem solving

SOC experience

Endpoint management

IAM

Vulnerability management

EDR/NIDS/NIPS

Automation

AI in security

MITRE ATT&CK

Documentation

Audit support

Security certifications

Education

Bachelor's degree in information systems or computer science

CompTIA Security+

Certified in Cybersecurity (CC)

CEH

ISO 27001 Lead Auditor/Lead Implementer

Tools

SIEM

SOAR

EDR

CSPM

IAM

NIDS/NIPS

Firewalls

Job description

The Information Security team at IMC Trading is responsible for protecting IMC's intellectual property, IT infrastructure and business operations against external and internal threats. We work closely with technology, risk, compliance, internal audit and business leaders to reduce cyber risk to acceptable levels.

We are looking for an Information Security Engineer to help grow and mature our Security Operations Centre, which runs on EDR, SIEM, SOAR, CSPM, IAM, firewalls, NIDS/NIPS and a range of other security controls. Alongside SOC work, you will play a central role in supporting IMC's regulatory obligations in India, preparing evidence and coordinating the cyber and systems audits that come with operating in this market.

We offer an environment that lets you broaden and deepen your information security knowledge, with access to advanced security technology, frequent training and a culture of knowledge sharing. As you gain experience with our existing SOC technology and processes, you will be given considerable freedom to mature the function through your own initiatives.

Your Core Responsibilities:

• Analyse security logs, alerts and reported events, and respond to or assist with the remediation of incidents.
• Hunt for potential compromise across the infrastructure using a range of threat intelligence sources.
• Report discovered vulnerabilities to technology owners and recommend remediation steps.
• Support and improve technical security controls.
• Leverage automation and orchestration to remove repetitive manual work.
• Apply AI-assisted tooling to alert triage, event summarisation and investigation workflows, with a pragmatic view of its limitations.
• Develop reporting that measures the effectiveness of security controls.
• Develop and improve incident response playbooks.
• Support regulatory and assurance audits: prepare evidence, coordinate with auditors and track observations through to closure.

Your Skills and Experience:

• Strong analytical and problem-solving skills.
• A self-starter with a genuine passion for cybersecurity.
• Previous SOC experience, and/or 3+ years of hands-on experience in an enterprise IT environment managing endpoints and applications on-premises or in the cloud.
• Exposure to security controls such as identity and access management, vulnerability management, and endpoint detection and response.
• Working knowledge of - or a strong willingness to learn - the Indian regulatory cybersecurity landscape: SEBI CSCRF, exchange circulars (NSE/BSE/MCX) and CERT-In directions, along with familiarity with ISO 27001 and the NIST CSF on which CSCRF is modelled.
• Experience supporting audits (cyber audit, systems audit, VAPT, ISO or SOC 2 assessments) - evidence preparation, auditor coordination and observation remediation - is a strong plus.
• Automation using basic coding skills or low-code / no-code tools.
• Awareness of AI and machine learning applications in security operations is a plus; hands-on experience with AI-assisted security tooling or LLM-based workflows is highly regarded.
• Understanding of common attack techniques and frameworks such as MITRE ATT&CK.
• Strong documentation and communication skills, with the ability to translate technical findings into audit-ready evidence and regulator-facing reports.
• Relevant tertiary and/or security qualifications are a plus - for example a Bachelor's degree in information systems or computer science, CompTIA Security+, Certified in Cybersecurity (CC), CEH, or ISO 27001 Lead Auditor / Lead Implementer. If you don't have them yet, you will be supported to pursue certifications on the job.

About Us

IMC is a research-driven trading firm where quantitative modeling, machine learning, and engineering shape how modern markets are traded. A stabilizing force in markets since 1989, we provide liquidity across trading venues, delivering the best outcome in value and risk management to investors. Using our own technology and capital, we build proprietary systems and algorithms that operate across global markets. Our researchers, traders, and engineers work as a collective, combining rapid experimentation, advanced infrastructure, and real-time feedback to turn insight into execution and execution into advantage.