Senior Information Security Engineer

iServeU; Khordha; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

iServeU, a modern banking infrastructure provider in India, seeks a Senior Information Security Engineer to design, implement, and maintain security controls across infrastructure, apps, and cloud environments. You will protect data, systems, and networks from evolving cyber threats while leading incident response, risk management, and governance initiatives.

The ideal candidate has hands-on cybersecurity experience with SOC, VAPT, GRC, and regulatory audits, plus a strong mix of technical and

Qualifications

• BE / B.Tech in a related field
• Security or compliance certifications preferred
• 3-5 years in Information Security / Cybersecurity

Responsibilities

• Design and implement secure architectures for networks, apps, and cloud
• Operate SIEM and incident response activities
• Perform VAPT, risk assessments, and third‑party security reviews
• Support regulatory audits including PCI DSS, RBI, NPCI
• Develop and maintain security policies, controls, and governance artifacts
• Coordinate with DevOps, Infra, and business teams to remediate risks
• Lead risk assessments, audit findings, and remediation tracking
• Provide mentorship to junior security engineers and promote security awareness

Skills

Audit Planning & Execution

Security Monitoring & Response

Regulatory Compliance

NPCI Ecosystem Compliance

Vulnerability Assessment

Governance & Audit Readiness

Security Policy Development

Vendor Security Risk Assessments

PCI DSS Compliance

Education

BE / B.Tech

Job description

Job Description:

Company Introduction-

iServeU is a modern banking infrastructure provider in APAC region, empowering financial enterprises with embedded fintech solutions for their customers. iServeU is one of the few certified partners with National Payment Corporation of India (NPCI), VISA for various products.

iServeU also provides a cloud-native, micro services-enabled, distributed platform with over 5000 possible product configurations with a low code/no code interface to banks, NBFCs, Fintech, and other regulated entities.

• We process around 2500 transactions per second by levering distributed & auto scale technology like K8.
• Our core platform combines of 1200+ micro services.
• Our customer list includes Fintech start-ups, top tier private banks to PSU bank. We operate in five countries and help customers constantly change the way financial institutions operate and innovate.
• Our solutions currently empowers over 20 banks and 250+ enterprises across India and abroad.
• Our platform seamlessly manages the entire transaction lifecycle, including withdrawals, deposits, transfers, payments, and lending through various channels like digital, branch, agents.

Our team of 500+ employees, with over 80% in technology roles is spread across offices in Bhubaneswar, Bangalore and Delhi. We have raised $8 million in funding to support our growth and innovation.

For more details visit: www.iserveu.in

Job Summary

We are looking for a Senior Information Security Engineer to join our InfoSec team. In this role, you will be responsible for designing, implementing, and maintaining security controls across our infrastructure, applications, and cloud environments, while protecting company data, systems, and networks from evolving cyber threats and responding to security incidents.

You will act as a security engineering, incident response, and risk management, working closely with IT, DevOps, Engineering, and other stakeholders to strengthen the organizations overall security posture. The ideal candidate should have experience in SOC, VAPT, GRC, security audits, risk assessments, and compliance, along with a strong combination of hands‑on technical cybersecurity knowledge and governance and compliance expertise.

Overall Responsibilities

• Design, implement, and review secure network, infrastructure, application, and cloud security architectures, including firewalls, IDS/IPS, IAM, DLP, SOAR, EDR, NDR and other security technologies.
• Manage SIEM and Security Operations using tools like Wazuh, monitor and investigate security events and support incident response activities.
• Conduct Vulnerability Assessments, Penetration Testing (VAPT), Red Team operations, attack simulations, and exploit validation across web, API, mobile, infrastructure, and cloud environments.
• Perform manual and automated web application and API security testing, including business logic validation, aligned with OWASP Top 10 and industry best practices.
• Conduct security assessments and code reviews for Android and iOS mobile applications, following OWASP methodologies and mobile security best practices.
• Conduct Third‑Party Risk Assessments, security reviews, customer security questionnaires, and vendor assessments.
• Support GRC, internal audits, regulatory audits, and certification audits, including ISO 27001, PCI DSS, SOC, RBI, and NPCI requirements.
• Conduct periodic risk assessments, security audits, control assessments, and compliance reviews, ensuring identified risks and audit observations are tracked through closure.
• Coordinate with Development, Infrastructure, DevOps, Cloud, Networking, and Business teams to identify security gaps, prioritize risks, and drive remediation activities.
• Develop and maintain security policies, standards, procedures, hardening guidelines, risk registers, audit documentation, and technical security documentation.
• Implement and maintain security monitoring, detection, alerting, vulnerability management, and security controls to strengthen the organizations overall security posture.
• Participate in incident response, root‑cause analysis, containment, eradication, and recovery, and recommend preventive measures to avoid recurrence.
• Identify and eliminate public exposure and security vulnerabilities while ensuring remediation is completed with minimal or zero impact to production environments.
• Handle and coordinate banking and regulatory security audits, ensuring timely submission of evidence, responses, and corrective actions.
• Stay updated on emerging threats, vulnerabilities, attack techniques, regulatory requirements, and cybersecurity technologies, and recommend appropriate security improvements.
• Provide technical guidance and mentorship to junior security engineers and support security awareness across technical and business teams.

Requirements

Educational Qualification

BE / B.Tech

Candidates with security or compliance related certifications will be given due preference

Experience: 3-5 years in Information Security / Cybersecurity

Key Skills

• Audit Planning & Execution
• Security Monitoring, Incident Detection and Response
• Regulatory Compliance and Certification Support
• NPCI Ecosystem Compliance.
• Vulnerability Assessment, Risk Identification and Remediation Management
• Compliance Support, Audit Readiness and Governance Framework
• Security Policy, SOP Development as per Regulatory Alignment
• Third-Party and Vendor Security Risk Assessments
• Technical Security Evaluations as per PCI DSS Compliance