Infosec Engineer

Ascendion Engineering; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Ascendion Engineering seeks an Information Security Engineer to design, implement, and manage robust security measures protecting our digital infrastructure, cloud environments, and internal networks in Bengaluru. You will play a pivotal role in detecting vulnerabilities, configuring security systems, and responding swiftly to incidents while aligning with ISO 27001 and SOC 2 controls.

Join a fast‑growing AI-native software engineering leader delivering measurable outcomes for Fortune 2000

Qualifications

• Security Operations / SOC experience with incident detection and response.
• Experience with SIEM like Splunk, Sentinel, QRadar.
• Knowledge of vulnerability management and EDR/XDR tools.
• Proficiency in SAST/DAST/ SCA and secure SDLC practices.
• Cloud security for AWS/Azure/GCP, IAM and network protection.
• GRC/ISO 27001, SOC 2 risk assessment and audit readiness.
• Penetration testing of Web/API/Mobile and standard tooling.

Responsibilities

• Design, implement, and manage robust security controls across cloud and on‑prem.Identify vulnerabilities and coordinate incident response.
• Monitor threats and ensure compliant security posture across ecosystems.

Skills

Security Operations

Incident Response

Threat Monitoring

EDR/XDR

Vulnerability Management

Secure SDLC

CI/CD Security

API Security

Cloud Security

GRC / Compliance

Penetration Testing

VAPT

Tools

Splunk

Sentinel

QRadar

Snyk

SonarQube

Checkmarx

Fortify

Veracode

Burp Suite

Nmap

Metasploit

Job description

About Ascendion

Ascendion is a leader in AI-Native platform driven software engineering company that underwrites outcomes, helping businesses innovate faster, smarter, and with greater impact. We partner with Global 2000 clients across North America, UK, Europe, and APAC to solve complex challenges in data, experience design, software product engineering, and workforce transformation. Powered by expert engineers, thousands of AI agents, and our Engineering to the Power of AI™ (EngineeringAI) method, we deliver measurable outcomes that build trust, unlock value, and accelerate growth. Learn more at ascendion.com

Company Culture

• - Build the coolest tech for world's leading brands
• - Solve complex problems – and learn new skills
• - Experience the power of transforming digital engineering for Fortune 500 clients
• - Master your craft with leading training programs and hands‑on experience

Experience a community of change makers! Join a culture of high-performing innovators with endless ideas and a passion for tech. Our culture is the fabric of our company, and it is what makes us unique and diverse. The way we share ideas, learning, experiences, successes, and joy allows everyone to be their best at Ascendion.

About the Role

We are looking for a Infosec engineer to join our team. In this role, you will security Operations / SOC.

Job Title: InfoSec Engineer

Key Responsibilities

We are seeking a detail-driven and experienced Information Security Engineer to design, implement, and manage robust security measures protecting our digital infrastructure, cloud environments, and internal networks.You will play a pivotal role in identifying vulnerabilities, configuring security systems, and responding swiftly to security incidents.

Minimum Qualifications

1. 1. Security Operations / SOC
   • SIEM: Splunk, Sentinel, QRadar
   • Incident detection and response
   • Threat monitoring and analysis
   • EDR/XDR tools
   • Vulnerability management
   • Security incident investigation
2. 2. Application Security / DevSecOps
   • SAST, DAST, SCA
   • OWASP Top 10
   • Tools: Snyk, SonarQube, Checkmarx, Fortify, Veracode
   • Secure SDLC
   • CI/CD security
   • Vulnerability remediation
   • API security
3. 3. Cloud Security
   • AWS/Azure/GCP security
   • IAM and access management
   • Cloud security posture management
   • Network security
   • Encryption and key management
   • Security monitoring and compliance
4. 4. GRC / Information Security Compliance
   • ISO 27001
   • SOC 2
   • Risk assessment
   • Security policies and controls
   • Audit and compliance
   • Third-party/vendor risk
   • Vulnerability and risk tracking
5. 5. Penetration Testing / VAPT
   • Web/API/mobile penetration testing
   • Vulnerability assessment
   • OWASP
   • Burp Suite
   • Nmap
   • Metasploit
   • Security assessment and reporting

Location: Bangalore