IT Security & Compliance Engineer

Rapyuta Robotics; Chennai District; On-site; INR 1,200,000 - 2,200,000; Full time

Benefits offered by this job

Competitive salary

Great team culture

Job summary

Rapyuta Robotics in Chennai, India, seeks an experienced IT Security & Compliance Engineer to lead cybersecurity operations, cloud security, and governance across the organization. You will manage incident response, risk assessments, and compliance programs while collaborating with engineering and product teams to embed security by design.

The role focuses on Microsoft 365 security, IAM, vulnerability management, network protection, and DevSecOps.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Security Operations, SOC incident handling, and threat response experience.
• Experience implementing ISO 27001 and NIST cyber security frameworks.

Responsibilities

• Monitor, investigate, and respond to security incidents, threats, malware, phishing, and ransomware attacks through SOC.
• Lead security compliance enablement aligned with ISO 27001 and the NIST Cybersecurity Framework, including risk assessments and audits.
• Administer and secure Microsoft 365 environments incl. Entra ID, Conditional Access, MFA, Defender, Purview, DLP, and email security.
• Manage endpoint security solutions, EDR platforms, device compliance, encryption, and remediation.
• Conduct vulnerability assessments, coordinate testing, patching, and track remediation.
• Implement and maintain network security controls incl. firewalls, VPNs, IDS/IPS, DNS security, and segmentation.
• Manage IAM, RBAC, PAM, and periodic access reviews.
• Perform security architecture reviews, cloud security assessments, and DevSecOps support.
• Maintain security documentation, risk registers, and continuous improvement of security posture.

Skills

Security Operations

Cloud Security

IAM & PAM

Compliance & Governance

Security Architecture

Threat & Vulnerability Management

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Microsoft Entra ID

MFA & Conditional Access

Microsoft Defender Suite

Purview

Exchange Online Security

EDR Solutions

SIEM Platforms

Qualys/Nessus/Rapid7/OpenVAS

Nmap/Wireshark/Burp/ZAP/Metasploit

Job description

We are committed to our core value of "Empathy," aiming to automate "demanding," "dirty," and "dangerous" jobs, and create a society where people can engage in more intellectual and creative work. By developing and supporting the implementation and operation of robotics platforms and robot solutionsutilizingthe world's most advanced control and coordination technologies, we strive to realize this vision.

Role Overview

We are looking for an experienced IT Security & Compliance Engineer to manage the organization's cybersecurity operations, cloud security, compliance initiatives, and security governance. The ideal candidate should have hands‑on experience in security operations, Microsoft 365 security, vulnerability management, endpoint protection, identity & access management, and ISO/NIST compliance frameworks.

Key Responsibilities

• Monitor, investigate, and respond to security incidents, threats, malware, phishing, and ransomware attacks through Security Operations (SOC).

• Lead security compliance enablement aligned with ISO 27001 and the NIST Cybersecurity Framework, including risk assessments, internal audits, policy management, vendor security reviews, and security awareness programs. (As the company already possess ISO, the defined compliances to be enabled across organization. NIST is in working)

• Administer and secure Microsoft 365 environments, including Microsoft Entra ID, Conditional Access, MFA, Microsoft Defender, Purview, DLP, email security, and audit monitoring.

• Manage endpoint security solutions, EDR platforms, device compliance, encryption, and vulnerability remediation.

• Conduct vulnerability assessments, coordinate penetration testing, manage patching, and track remediation activities.

• Implement and maintain network security controls, including firewalls, VPNs, IDS/IPS, DNS security, and network segmentation.

• Manage Identity & Access Management (IAM), including RBAC, privileged access management, user lifecycle management, and periodic access reviews.

• Perform security architecture reviews, application security assessments, cloud security reviews, secure configuration management, and support DevSecOps initiatives.

• Maintain security documentation, risk registers, and ensure continuous improvement of the organization's security posture.

MinimumRequirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Security Operations:

Incident Response & Root Cause Analysis, Threat Hunting, SIEM Monitoring, Malware & Phishing Response

Microsoft 365 Security:

Microsoft Entra ID (Azure AD), Conditional Access & MFA, Microsoft Defender Suite, Microsoft Purview, Data Loss Prevention (DLP), Exchange Online Security, Secure Score Management

Endpoint & Infrastructure Security:

Microsoft Defender/CrowdStrike, Endpoint Detection & Response (EDR), BitLocker/FileVault, Patch & Vulnerability Management

Compliance & Governance:

ISO 27001, NIST Cybersecurity Framework, Risk Management, Internal & External Audits, Security Policies & Awareness, Vendor Risk Assessment

Identity & Access Management:

RBAC, Privileged Access Management (PAM), Access Reviews, Joiner-Mover-Leaver (JML) Process

Security Engineering:

Secure SDLC, Security Architecture Reviews, Cloud Security Assessments, Secure Configuration Management, DevSecOps Support

SIEM Platforms:

Microsoft Sentinel, Splunk, IBM QRadar, LogRhythm, Elastic SIEM

Vulnerability Management:

Qualys, Nessus, Rapid7 InsightVM, OpenVAS

Email Security:

Exchange Online, Microsoft Defender for Office 365, SPF, DKIM, DMARC, Anti-Phishing Policies

Security Assessment Tools:

Nmap, Wireshark, Burp Suite, OWASP ZAP, Metasploit

Preferred Certifications:

ISO 27001 Lead Implementer/Lead Auditor, Microsoft Certified: Cybersecurity Architect Expert/Security Administrator, CompTIA Security+, CISSP, CEH, SC-200, SC-300, AZ-500.

• Exciting and challenging problems are addressed using wide-ranging technologies and tools.
• Competitive salary
• Great team culture, peers and workplace