Security Engineer

Ingenium Digital; Bengaluru; Hybrid; INR 3,250,000 - 6,500,000; Full time

Job summary

Ingenium Digital in Bengaluru is seeking a hands-on Security Engineer to strengthen our security posture across cloud infrastructure and deployment pipelines. You will implement security controls, monitor alerts, and support remediation through to completion across the organisation's platform.

The role collaborates with platform and engineering teams to resolve insecure configurations in AWS, conduct risk scoring on vulnerabilities, and help drive audits for PCI-DSS, ISO 27001 and SOC2.

Qualifications

• Knowledge of security controls and cloud (AWS) infrastructure
• Strong analytical and problem-solving skills
• Excellent communication skills, both written and verbal
• Ability to work in a team environment and collaborate with cross-functional groups
• Strong analytical and problem-solving skills with high attention to detail
• Practical knowledge and experience of implementing and validating security controls against frameworks PCI DSS, ISO 27001, and SOC2

Responsibilities

• Assist with building, tuning, and maintaining security alerts aligned to industry frameworks (e.g., MITRE ATT&CK)
• Investigate security alerts, gather evidence and follow/improve incident response playbooks during active security events
• Deploy, maintain, and monitor log collectors and security telemetry
• Work closely with platform and engineering teams to resolve insecure configurations within our cloud environments
• Conduct risk scoring against vulnerabilities across the platform to prioritize efforts, actively participating in remediation and tracking all findings through to successful completion
• Leverage AI and security automation capabilities to defend the environment at machine speed, rapidly triage security alerts, and reduce manual investigation overhead
• Help block preventable security issues by maintaining automated security guardrails in deployment pipelines, enabling engineers to ship securely
• Review system and application access controls, ensuring strict adherence to Principle of Least Privilege and Role Based Access Control (RBAC)
• Conduct periodic reviews and testing of security controls to validate their ongoing effectiveness and alignment with organizational risk standards.
• Build automations to streamline security response and gather technical evidence for audits (e.g., PCI-DSS, ISO 27001, SOC2)
• Support the lifecycle of cryptographic keys, from generation, distribution, rotation, storage to the retirement and destruction of keys in accordance with policies and procedures
• Act as designated Key Custodian, securely managing the handling, sharing and exchange of cryptographic keys with internal and external partners

Job description

Security Engineer

Team: Information Security

Reports to: CISO / Senior security engineer (TBD)

Role Overview:

The Security Engineer is a vital member of the Information Security team, helping to drive the Information Security strategy in close alignment with business objectives. In this hands-on role, you will strengthen our security posture across cloud infrastructure and deployment pipelines, implement security controls and gather evidence for compliance audits, monitor and respond to security alerts, validate control effectiveness, and actively support the remediation of vulnerabilities through to completion across the organisation's platform.

Technical Responsibilities

• Assist with building, tuning, and maintaining security alerts aligned to industry frameworks (e.g., MITRE ATT&CK)
• Investigate security alerts, gather evidence and follow/improve incident response playbooks during active security events
• Deploy, maintain, and monitor log collectors and security telemetry
• Work closely with platform and engineering teams to resolve insecure configurations within our cloud environments
• Conduct risk scoring against vulnerabilities across the platform to prioritize efforts, actively participating in remediation and tracking all findings through to successful completion
• Leverage AI and security automation capabilities to defend the environment at machine speed, rapidly triage security alerts, and reduce manual investigation overhead
• Help block preventable security issues by maintaining automated security guardrails in deployment pipelines, enabling engineers to ship securely
• Review system and application access controls, ensuring strict adherence to Principle of Least Privilege and Role Based Access Control (RBAC)
• Conduct periodic reviews and testing of security controls to validate their ongoing effectiveness and alignment with organizational risk standards.
• Build automations to streamline security response and gather technical evidence for audits (e.g., PCI-DSS, ISO 27001, SOC2)
• Support the lifecycle of cryptographic keys, from generation, distribution, rotation, storage to the retirement and destruction of keys in accordance with policies and procedures
• Act as designated Key Custodian, securely managing the handling, sharing and exchange of cryptographic keys with internal and external partners

Skills & experience needed

• Knowledge of security controls and cloud (AWS) infrastructure
• Strong analytical and problem-solving skills
• Excellent communication skills, both written and verbal
• Ability to work in a team environment and collaborate with cross-functional groups
• Strong analytical and problem-solving skills with high attention to detail
• Practical knowledge and experience of implementing and validating security controls against frameworks i.e PCI DSS, ISO 27001, and SOC2