Senior Security Engineer

Radius Ois; Khordha; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Radius Ois is seeking a Senior Security Engineer to lead cloud security implementation for its CCaaS platform. Responsibilities include architecting and maintaining security controls across AWS, Azure, and GCP infrastructures. The role necessitates collaboration with cross-functional teams and requires extensive experience in cloud security and compliance frameworks.

The ideal candidate will have 5–10 years of information security experience, with 3+ years focused on cloud security, and familiarity with PCI-DSS, SOC 2, HIPAA, and GDPR.

Qualifications

• Minimum 3 years focused on cloud security.
• Experience implementing PCI-DSS, SOC 2, HIPAA, GDPR compliance frameworks.
• Knowledge of cloud-native security services.

Responsibilities

• Design and implement security controls across multi-cloud infrastructure.
• Lead security assessments and penetration testing.
• Develop security incident response procedures.

Skills

Cloud security

Compliance frameworks

Infrastructure-as-Code

Network security

API security

Problem-solving

Education

5–10 years of experience in information security

Tools

Terraform

CloudFormation

SIEM

Vulnerability scanners

Job description

RADIUS is an AI-powered Omnichannel Interaction System (OIS) that unifies customer touchpoints into a single intelligent platform. It enables enterprises to manage conversations seamlessly across channels while ensuring context continuity, faster resolutions, and superior customer experiences.
Developed by VIS Networks, a technology-driven company committed to transforming customer engagement, RADIUS combines innovation, scalability, and automation to help businesses deliver connected, data-driven, and future-ready CX.

Role Overview

We are seeking a Senior Security Engineer to lead cloud security implementation and compliance initiatives for our CCaaS platform. In this role, you will architect, implement, and maintain security controls across AWS / Azure / GCP infrastructure while ensuring adherence to industry compliance frameworks. You will work closely with engineering, product, legal, and operations teams to embed security into every layer of the platform. This role is critical to our organizational mission, directly impacting our ability to serve enterprise clients and expand into heavily regulated verticals such as financial services, healthcare, and payment processing.

Key Responsibilities

Cloud Security Architecture & Implementation

• Design and implement security controls across multi-cloud infrastructure (AWS / Azure / GCP).
• Establish Infrastructure-as-Code (IaC) security practices using Terraform or CloudFormation.
• Implement IAM policies, role-based access control (RBAC), and privilege escalation prevention.
• Deploy and configure cloud-native security tools (CloudTrail, VPC Flow Logs, GuardDuty, Security Hub, etc.).
• Establish network segmentation, encryption standards (data-at-rest and in-transit), and secret management solutions.
• Lead security assessments and penetration testing of cloud infrastructure.

Compliance Framework Leadership

• PCI-DSS 3.2 / 4.0: Implement and maintain payment processing controls, lead audit readiness, and manage vulnerability scanning and patch management.
• SOC 2 Type II: Design control matrices, establish evidence collection and documentation processes, and coordinate with auditors during certification cycles.
• HIPAA: Implement technical safeguards for PHI, design encryption, access controls, and audit logging, and ensure BAA compliance.
• GDPR: Implement data processing controls, consent management, and data subject rights fulfillment, and coordinate with legal for DPAs.
• Develop and maintain compliance roadmaps for additional certifications as business needs evolve.
• Prepare for and support third-party audits and customer security assessments.

Security Operations & Monitoring

• Establish security monitoring, logging, and alerting infrastructure (SIEM / log aggregation).
• Implement a vulnerability management program covering scanning, remediation, and tracking.
• Develop security incident response procedures and lead incident post-mortems.
• Create and maintain security runbooks and playbooks.

Secure Development & CI/CD

• Integrate security scanning into CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Define secure coding standards and security-focused code review practices.
• Establish dependency management and third-party library audit processes.

Security Documentation & Risk Management

• Maintain security architecture documentation and threat models.
• Develop security policies, standards, and procedures.
• Conduct risk assessments and maintain a risk register.
• Create security metrics dashboards for executive visibility.

Requirements

• 5–10 years of experience in information security, with at least 3+ years focused on cloud security.
• Demonstrated experience implementing and maintaining at least two of the following compliance frameworks: PCI-DSS, SOC 2, HIPAA, GDPR.
• Hands‑on experience with infrastructure-as-code security (Terraform, CloudFormation, or Ansible).
• Working knowledge of cloud-native security services (IAM, KMS, CloudTrail, Security Hub), log aggregation and SIEM, vulnerability scanners, container security, and secrets management solutions.
• Deep understanding of cloud architecture security principles: defense-in‑depth, zero trust, and principle of least privilege.
• Strong grasp of network security fundamentals (VPCs, firewalls, VPNs, DDoS mitigation).
• Knowledge of encryption technologies and certificate management.
• Proficiency in API security and secure authentication protocols (OAuth 2.0, SAML, mTLS).
• Familiarity with secure coding practices and the OWASP Top 10.
• Understanding of audit processes, evidence collection, and compliance assessment methodologies.
• Ability to translate compliance requirements into technical controls.
• Strong communication skills with the ability to translate complex security concepts for non‑technical stakeholders.
• Excellent cross‑functional collaboration with engineering, product, legal, and operations teams.
• Ownership mentality with end‑to‑end responsibility for security outcomes.
• Attention to detail and meticulous in documentation, compliance evidence, and control implementation.
• Strong problem‑solving skills, balancing security requirements with business agility.
• Continuous learning mindset to stay current with the evolving threat landscape.

Preferred Qualifications

• Industry certifications such as CISSP, CCSP, CISM, or AWS Security Specialty are a plus.
• Experience supporting enterprise customers in regulated industries (financial services, healthcare, payment processing).
• Exposure to DPDP and other emerging data protection regulations.
• Strong communication skills to convey complex security concepts to non‑technical stakeholders.
• Ownership mindset and strong cross‑functional collaboration with engineering, product, legal, and operations teams.
• Continuous learning approach to stay ahead of the evolving threat landscape.

What You’ll Deliver

• A robust multi‑cloud security architecture aligned with industry best practices.
• Audit‑ready compliance programs for SOC 2, PCI‑DSS, HIPAA, GDPR, and DPDP.
• Mature security operations, monitoring, and incident response capabilities.
• Secure CI/CD pipelines and embedded security in the software development lifecycle.
• Comprehensive security documentation, policies, and executive risk dashboards.

Ready to architect security at enterprise scale and shape the compliance foundation of a fast‑growing SaaS platform? Apply now!