Senior Information Security Engineer

Imagine Learning; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Imagine Learning seeks a Senior Security Engineer to enhance their security posture. This position involves designing security architecture and leading incident response efforts across cloud infrastructures.

The ideal candidate has over 5 years in security engineering, strong cloud security knowledge, and relevant certifications like CISSP or OSCP. Opportunities for mentorship and compliance support are also integral to this role.

Qualifications

• 5+ years of experience in security engineering or a closely related field.
• Solid understanding of network protocols and common attack vectors.
• Experience with incident response and forensic investigation.

Responsibilities

• Design, implement, and maintain security architecture across cloud infrastructure.
• Lead detection and response for security incidents.
• Conduct threat modelling and security reviews for new systems.

Skills

Cloud security (AWS, GCP, or Azure)

Security tooling (SIEM, IDS/IDP)

Programming (Python, Java, C#)

OWASP standards application

Incident response

Cryptography

Communication skills

Education

BCHons degree in a relevant field

Tools

Vulnerability management tools

Endpoint protection tools

SIEM tools

Job description

We're seeking an experienced Senior Security Engineer to strengthen and scale our security posture. In this role, you'll design and implement security controls, lead incident response, and partner with engineering teams to embed security into everything we build. You'll be a technical leader who balances pragmatic risk management with the realities of a fast-moving organisation.

Responsibilities

• Design, implement, and maintain security architecture across cloud infrastructure, applications, and networks.
• Lead detection, investigation, and response for security incidents.
• Conduct threat modelling, security reviews, and risk assessments for new and existing systems.
• Build and improve security tooling, automation, and monitoring (SIEM, vulnerability scanning, etc. ).
• Develop and enforce security policies, standards, and best practices.
• Partner with engineering teams to integrate security into the SDLC and CI/CD pipelines.
• Mentor junior engineers and serve as a security subject‑matter expert across the organisation.
• Support compliance efforts (e. g., SOC 2 ISO 27001 GDPR) as needed.

Requirements

• BCHons degree in a relevant field.
• 5+ years of experience in security engineering or a closely related field.
• Strong knowledge of cloud security (AWS, GCP, or Azure) and infrastructure‑as‑code.
• Hands‑on experience with security tooling: SIEM, IDS/IDP, vulnerability management, endpoint protection.
• Proficiency in at least one programming language (Python, Java, C#, etc. ).
• Practical experience applying OWASP standards (Top 10 ASVS) to identify and remediate application security risks.
• Solid understanding of network protocols, cryptography, and common attack vectors.
• Experience with incident response and forensic investigation.
• Strong communication skills and the ability to influence across technical and non‑technical audiences.
• Relevant certifications (CISSP, OSCP, GIAC, etc. ).
• Experience in a regulated industry or with formal compliance frameworks.
• Familiarity with container and Kubernetes security.
• Background in application security or secure code review.