Security Engineer II

CO_AFATI Apex Fund Services LLP; Pune District; On-site; INR 1,400,000 - 2,100,000; Full time

Benefits offered by this job

High visibility in a global org

Diverse international team

Exposure to leading security tech

Professional development opportunities

Supportive work environment

Job summary

Apex Group is seeking a Security Engineer – Platform to own, engineer, operate, and continuously improve global security platforms across its technology estate. You will drive automation, reduce cyber risk, and support regulatory and audit requirements while collaborating with Security Architecture and SOC teams.

The role requires hands-on experience with Defender Suite, Entra ID, PAM, and SIEM, in a fast-paced, globally distributed environment.

Qualifications

• 7+ years of experience in Information Security or related roles.
• Experience engineering and operating enterprise-scale security platforms.
• Strong hands-on with Microsoft and third-party security technologies.

Responsibilities

• Engineer, implement, and maintain enterprise security platforms across the global estate.
• Act as technical owner for designated security technologies and services.
• Drive platform maturity, automation, and operational effectiveness.
• Develop platform standards, baselines, and operating procedures.
• Ensure alignment with security architecture, regulatory requirements, and threat landscapes.
• Identify opportunities to automate operational activities through scripting and APIs.

Skills

Information security

Zero Trust

IAM

PAM

SIEM

Cloud security

Tools

Microsoft Defender Suite

Microsoft Entra ID

CyberArk

Netskope

Mimecast/Proofpoint/Tessian

Qualys

Job description

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion. That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience. Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you

The Role:

The Security Engineer – Platform is a senior technical role within Apex Group's Security Engineering function, responsible for engineering, operating, and continuously improving the organization's global security platforms and capabilities. The role owns the implementation, optimization, automation, and operational effectiveness of enterprise security technologies spanning endpoint security, identity and access management, email security, privileged access management, network security, cloud security, vulnerability management, and security monitoring. The successful candidate will play a critical role in advancing Apex's security maturity, supporting regulatory and audit requirements, enabling secure business growth, and reducing cyber risk across a global technology estate. This role works closely with Security Architecture, Cloud & Infrastructure Engineering, Identity & Access Governance (IPAM), SOC, and Technology teams to ensure security controls are integrated, scalable, and aligned to Apex's strategic security roadmap. The position also contributes to major strategic initiatives including Zero Trust adoption, security platform modernization, mergers and acquisitions (M&A) integration activities, cloud transformation programs, CyberArk maturity improvements, Microsoft security platform enablement, and SIEM modernization initiatives.

Security Platform Ownership & Engineering

• Engineer, implement, configure, maintain, and continuously improve enterprise security platforms across the Apex Group estate.
• Act as a technical owner and subject matter expert for designated security technologies and services.
• Drive platform maturity initiatives to improve effectiveness, coverage, automation, resilience, and user experience.
• Develop and maintain platform standards, security baselines, operating procedures, and engineering documentation.
• Ensure security platforms remain aligned to security architecture principles, regulatory requirements, and evolving threat landscapes.
• Identify opportunities to automate operational activities through scripting, APIs, orchestration, and platform integrations.

Enterprise Security Technologies Provide senior engineering support across technologies including:

• Microsoft Defender Suite (Endpoint, Identity, Cloud Apps, XDR)
• Microsoft Entra ID Security
• IGA/PAM Management tools
• Email Security Platforms (Mimecast, Proofpoint, Tessian or equivalent)
• Network Security & Zero Trust Platforms (Netskope, SWG, CASB, ZTNA/NPA)
• Vulnerability Management Platforms (Qualys or equivalent)
• Cloud Security Posture Management (CSPM) platforms for cloud security visibility, configuration governance, compliance monitoring, and risk reduction
• Data Security Posture Management (DSPM) solutions for data discovery, classification, security monitoring, and data risk management
• Security Ratings & Third-Party Risk Platforms
• SIEM and Security Monitoring Platforms (Exabeam, Sentinel and related technologies)
• Security Awareness and Human Risk Management platforms

Experience and Knowledge: Essential

• 7+ years of experience in Information Security, Cyber Security, Security Engineering, or related technical security roles.
• Demonstrable experience engineering and operating enterprise-scale security platforms within complex global organizations.
• Strong hands-on experience with Microsoft and third-party security technologies including:
  • Microsoft Defender Suite
  • Microsoft Entra ID
  • CyberArk
  • Netskope
  • Mimecast, Proofpoint or Tessian
  • Qualys
  • SIEM and Security Monitoring platforms
• Strong understanding of:
  • Zero Trust security models
  • Identity and Access Management (IAM)
  • Privileged Access Management (PAM)
  • Conditional Access
  • MFA
  • SSO and Identity Federation
  • Endpoint Security
  • Email Security
  • Vulnerability Management
  • Security Monitoring & Detection Engineering
  • Cloud Security
• Experience supporting Azure, AWS, OCI, and hybrid environments.
• Experience with PowerShell, Python, APIs, automation, or infrastructure-as-code concepts.
• Strong troubleshooting and analytical skills.
• Excellent communication and stakeholder management skills.

Desirable

• Experience supporting M&A integrations, cloud migrations, or enterprise transformation programs.
• Familiarity with security architecture principles and security engineering patterns.
• Exposure to DevSecOps, CI/CD security, infrastructure-as-code, or cloud-native security technologies.
• Experience working in regulated financial services environments.
• Relevant certifications such as: CISSP, CCSP, Microsoft Security Certifications, CyberArk Certifications, etc.

What will you get in return:

• High visibility within a fast‑growing global organization.
• Opportunity to work with a diverse international team of security professionals.
• Exposure to leading security technologies across multiple environments and jurisdictions.
• A role where your contributions directly improve the organization’s security maturity.
• Professional development opportunities, including certifications and hands‑on learning.
• A positive, supportive, and collaborative work environment.
• A unique opportunity to grow within one of the world’s leading independent fund administrators.

About Apex Group We are dedicated to driving positive change in financial services while fuelling the growth and ambitions of asset managers, allocators, financial institutions, and family offices. Established in Bermuda in 2003, the Group has continually disrupted the asset serving industry through our investment in innovation and talent. Today, we set the pace in asset servicing and stand out for our unique single-source solution and unified cross asset-class platform which supports the entire value chain, harnesses leading innovative technology, and benefits from cross-jurisdictional expertise delivered by a long-standing management team and over 13,000 highly integrated professionals. We’re a people-powered business, and our people are full of ambition. Together, we’re inspired to lead the new era of data and tech enabled service. Bringing new products and services to market. Sharpening our client focus. Disrupting the market to exceed expectations. Innovating across a range of specialisms. With our focus on making a difference to our people, our planet and our society, you’ll experience more here than you would at most other companies. Prepare to accelerate. We’re a people-powered business with a vision to inspire a new era of service-led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. Positive change starts with you. We’re a people-powered business with a vision to inspire a new era of service-led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. The journey is yours to own. When you stretch yourself, you grow. We want you to explore ways of working that will see you thrive as part of something bigger. We’ll help you with a solid structure, challenging projects, vibrant networks, supportive colleagues and approachable leaders. All the things you need to own your unique journey. Find out more about us