Security Engineer

Rubiscape; Pune District; On-site; INR 2,000,000 - 3,400,000; Full time

Job summary

Rubiscape is seeking a Security Engineer to own the design, implementation, and hardening of security controls across SaaS, BYOC, on-prem, and air-gap deployments. You will work with platform engineering and product teams to embed security into a trusted system for Fortune 500 enterprises and government organisations in India and globally.

Responsibilities include building layered controls, threat modelling, audit trails, and SIEM instrumentation while ensuring compliance with ISO 27001, SOC 2

Qualifications

• 4+ years of information security engineering experience in a product or SaaS.
• Hands-on with RBAC/ABAC design, PKI, secrets management, and zero-trust architecture.
• Experience with SIEM platforms and custom rule writing.
• Knowledge of ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 compliance.
• Scripting in Python, Bash, or Go for security automation.
• Strong documentation to produce threat models and runbooks.

Responsibilities

• Design and implement layered security controls across Rubiscape deployments.
• Lead threat modelling exercises for new platform features.
• Maintain audit trails and data lineage for compliance.
• Lead vulnerability assessments and penetration testing cycles with defined SLAs.
• Instrument SIEM pipelines with Rubiscape-specific detection rules.
• Define security baselines for air-gap and on-prem deployments for government/defense environments.
• Participate in customer trust reviews and security assurance calls.

Skills

RBAC/ABAC design

Zero-trust network architecture

Security automation scripting

Threat modeling

Documentation skills

Tools

HashiCorp Vault

Splunk

ELK

PKI

Job description

Rubiscape operates at the intersection ofAI, data, and enterprise decision-making — a position that demandsuncompromising security across every layer of the platform. As a SecurityEngineer, you will own the design, implementation, and continuous hardening ofsecurity controls across Rubiscape’s SaaS, BYOC, on-premises, and air-gapdeployment models. You will work directly with platform engineering and productteams to embed security into the fabric of a system trusted by Fortune 500enterprises and government organisations with the most demanding compliancerequirements in India and globally.

Key Responsibilities

• Design and implement layeredsecurity controls including RBAC, attribute-based access control, networksegmentation, and encryption-at-rest and in-transit across all Rubiscapedeployment models.
• Conduct regular threatmodelling exercises (STRIDE/PASTA) for new platform features across RubiFlow,RubiStudio, RubiSight, RubiAI, and the Business Workbench.
• Build and maintain audit trailand data lineage security mechanisms to satisfy ISO 27001, SOC 2 Type II, andIndia’s DPDP Act 2023 requirements.
• Lead vulnerability assessmentsand penetration testing cycles; triage findings, assign severity, and driveremediation with engineering owners to closure within defined SLAs.
• Instrument SIEM pipelines(Splunk / ELK) with Rubiscape-specific detection rules for insider threats,data exfiltration, and privilege escalation attempts.
• Define and enforce securitybaselines for air-gap and on-premises deployments used in government anddefence customer environments, including CERT-IN compliance requirements.
• Participate in customer trustreviews, security questionnaires, and pre-sales security assurance calls forenterprise and regulated-sector accounts.

Nice to Have

• Certifications: CISSP, CEH,OSCP, or equivalent.
• Experience securingmulti-tenant SaaS platforms or enterprise data/AI platforms.
• Familiarity with CERT-INguidelines and MeitY security frameworks for cloud-deployed enterprisesoftware.
• Prior exposure to air-gap orhigh-assurance deployment environments in government or defence sectors.

About Rubiscape

Rubiscape is India’s leading DecisionIntelligence Platform, unifying data engineering, BI, machine learning, andagentic AI in a single governed platform. Built in Pune and trusted by Fortune500 enterprises across BFSI, manufacturing, healthcare, and government. 8international innovation patents. 10 Industry-Academia Labs & COEs. From BIto AI — One Platform. Every Decision.

Requirements

• 4+ years of experience ininformation security engineering within a product or SaaS company.
• Hands-on expertise withRBAC/ABAC design, PKI, secrets management (HashiCorp Vault or equivalent), andzero-trust network architecture.
• Practical experience with SIEMplatforms (Splunk, ELK, or equivalent) including custom rule authoring andalert tuning.
• Working knowledge of ISO 27001,SOC 2 Type II, and India’s DPDP Act 2023 compliance frameworks.
• Proficiency in at least onescripting language (Python, Bash, or Go) for security automation and tooling.
• Strong documentation skills —ability to produce threat models, security design documents, and runbooks thatengineering and compliance teams can act on.