Sr Security Engineer

Kobie Marketing; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Medium is establishing a Tech Hub in India and is looking for a Security Engineer. This role involves designing security controls, conducting vulnerability assessments, and ensuring the security of cloud-native platforms. The ideal candidate has over 5 years of experience in information security and must be proficient in securing cloud environments, particularly AWS.

Applicants must also have strong analytical skills and the ability to communicate technical concepts effectively. Competitive growth opportunities and a culture of security awareness are elements of this role.

Qualifications

• 5+ years experience in information security or cybersecurity engineering.
• 3+ years securing cloud environments, preferably AWS.
• Experience with vulnerability management tools and penetration testing.

Responsibilities

• Design and maintain security controls across cloud infrastructure.
• Conduct vulnerability assessments and penetration testing.
• Monitor security events and investigate incidents.

Skills

Information Security

Cybersecurity Engineering

Cloud Security

SIEM Platforms

Vulnerability Management

Network Security

Identity and Access Management

DevSecOps

Scripting

Linux Administration

Job description

Join our India Tech Hub – Be among the first hires!

Kobie, a 35‑year veteran of the loyalty industry, a multi‑year Forrester Leader, and USA Top Workplace is expanding its global footprint by establishing a Tech Hub in India. Kobie partners with global brands to build deep connections with their customers through personalized, data‑driven loyalty experiences and has a mission of growing enterprise value through loyalty. The Tech Hub will serve as a Global Capabilities Center for a broad range of technology roles, and this is your chance to play a pivotal role in shaping our presence in India.

About the team and what we will build together: The Security Engineering team is focused on building and maintaining a robust, enterprise‑grade security posture across Kobie’s cloud‑native platforms, applications, and data ecosystems. With a strong emphasis on proactive threat detection, secure architecture, and security automation, our team ensures that security is embedded into every layer of what we build and operate. As a Security Engineer, you will serve as a key defender and enabler – designing security controls, identifying vulnerabilities, and partnering with engineering and operations teams to deliver solutions that are innovative, resilient, and secure.

How You Will Make an Impact

• Design, implement, and maintain security controls across cloud infrastructure, applications, and network environments.
• Conduct vulnerability assessments, penetration testing, and threat modeling to proactively identify and remediate security risks.
• Monitor security events and alerts using SIEM tooling, investigate incidents, and drive timely remediation.
• Partner with Cloud Engineering, DevOps, and application teams to embed security best practices into CI/CD pipelines and infrastructure‑as‑code workflows.
• Support the development and enforcement of security policies, standards, and compliance frameworks (e.g., SOC 2, NIST CSF, PCI‑DSS).
• Lead or contribute to security incident response activities, including root cause analysis and post‑incident reviews.
• Implement and manage identity and access management (IAM) controls, enforcement of least‑privilege, privileged access management, and conditional access policies; enforce network and host‑based data loss prevention (DLP), information protection, and endpoint security controls across the enterprise environment.
• Evaluate and manage third‑party security tools and vendor risk assessments; conduct security reviews of end‑user applications and software to support an approved software process, ensuring only vetted and compliant tools are introduced into the environment.
• Drive automation of security operations broadly, including testing, compliance checks, threat detection, triage, and response workflows; leverage AI‑assisted tooling to accelerate analysis, reduce manual effort, and increase coverage across the security program.
• Maintain accurate and thorough security documentation including runbooks, threat models, and risk registers.
• Act as a security subject matter expert, advising engineering and product teams on secure design and coding practices.
• Proactively track emerging threats, vulnerabilities, and industry trends to continuously strengthen Kobie’s security posture.
• Train and develop team members on security and compliance practices, tools, and frameworks, fostering a culture of security awareness and continuous improvement.

What You Need to Be Successful

• 5+ years of experience in information security, cybersecurity engineering, or a related technical discipline.
• 3+ years of hands‑on experience securing cloud environments (AWS preferred), including IAM, VPC security, security groups, and cloud‑native security services (e.g., AWS GuardDuty, Security Hub, CloudTrail).
• Experience with SIEM platforms and security event monitoring, alerting, and incident response workflows.
• Proficiency in vulnerability management tools and processes, including experience conducting or coordinating penetration testing.
• Solid understanding of network security concepts including firewalls, WAFs, IDS/IPS, DNS security, and zero‑trust principles.
• Experience with identity and access management including SSO, MFA, OAuth, and privileged access management (PAM) solutions.
• Hands‑on experience integrating security into CI/CD pipelines (DevSecOps), including static/dynamic analysis tools and secrets management.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF v2.0, PCI‑DSS, and their technical implementation requirements; working knowledge of AI‑specific frameworks (e.g., NIST AI RMF, ISO 42001) is a plus.
• Working knowledge of data privacy regulations and their operational security implications, including GDPR and CCPA.
• Hands‑on experience implementing and managing conditional access policies, network and host‑based DLP, information protection classifications, and endpoint security controls within an enterprise security platform.
• Scripting or automation experience (Python, Bash, or similar) for security tooling and workflow automation; comfort leveraging AI‑assisted tools to enhance and accelerate security operations, analysis, and process development.
• Strong Linux administration skills, preferably with RHEL‑based systems.
• Excellent analytical and problem‑solving skills with the ability to assess complex risk scenarios and communicate findings clearly.
• Strong written and verbal communication skills, with the ability to present technical security concepts to non‑technical stakeholders.
• Experience mentoring or developing junior security team members, or demonstrated ability to contribute to team capability growth through training, knowledge transfer, or documentation.
• Relevant security certifications such as CISSP, CISM, OSCP, AWS Security Specialty, or equivalent are a plus.