Lead Security Engineer

Arcana Analytics; Bengaluru; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Arcana Analytics is seeking a Lead Security Engineer to elevate their overall security posture. This role focuses primarily on GCP security, enforcing compliance with standards such as ISO 27001, SOC 2, and GDPR. Responsibilities include automating security controls, hardening infrastructure, and ensuring security by design across various teams.

The ideal candidate will have over 5 years of experience in security, particularly within fintech, and strong skills in Infrastructure-as-Code and Python scripting.

Qualifications

• Experience securing cloud-native platforms and hybrid infrastructures.
• Deep familiarity with fintech and portfolio-management standards.
• Proficiency with policy-as-code frameworks.

Responsibilities

• Design and enforce security policies across all platforms.
• Automate controls and harden infrastructure.
• Configure monitoring and incident response for security events.

Skills

5+ years in security and compliance

GCP security expertise

Infrastructure-as-Code skills

Python scripting proficiency

Strong communicator

Tools

Terraform

GCP

Kubernetes

Job description

As our Lead Security Engineer, you'll own and elevate Arcana's overall security posture - cloud, on-prem, and everything in between. You'll design and enforce policies, automate controls, and harden infrastructure end-to-end. While your primary focus will be on our GCP resources, you'll also partner with teams across networking, applications, and compliance to ensure we're secure by design and resistant to drift.

Responsibilities:

• Enterprise Security Architecture - Governance and Compliance, including driving adherence to ISO 27001, SOC 2, GDPR, and enforcing CIS benchmarks on all infrastructure.
• Policy, Automation, and Guardrails - own the end-to-end security lifecycle by defining policy-as-code, embedding continuous compliance checks into CI/CD, and building automated, drift-resistant guardrails across cloud, containers, and VMs.
• Infrastructure Hardening and Drift Detection - implement automated drift alerts and self-healing playbooks for VPCs, firewall rules, Kubernetes clusters, and endpoints.
• Monitoring, Logging, and Incident Response - configure Cloud Audit Logs, SIEM exports, and custom alerts for critical security events; lead root-cause investigations, build detection logic, and develop runbooks for cloud-wide incidents.

Requirements:

• 5+ years driving security and compliance in dynamic, regulated environments—securing cloud-native platforms and hybrid infrastructures, with deep familiarity in fintech and portfolio-management standards, and best practices for supporting distributed, remote teams.
• Deep expertise with GCP security (IAM, KMS, VPC Service Controls, Cloud Logging/Audit, WAF, SecOps) and Kubernetes application hardening.
• Strong Infrastructure-as-Code skills (Terraform or equivalent) and GitOps experience (ArgoCD, Flux).
• Proficiency in Python scripting and policy-as-code frameworks (OPA, Gatekeeper).
• Excellent communicator—able to translate technical findings into clear policies and remediation plans.

Helpful Experience:

• Familiarity with multi-cloud security controls.
• Security certifications (GCP Professional Security Engineer, CISSP, CKA/CKS).
• Experience with service mesh (Istio/Anthos) or zero-trust architectures.