Senior Information Security Engineer - Cloud & GRC

iServeU Technology Pvt. Ltd.; Hinoba-an; On-site; PHP 796,000 - 1,326,000; Full time

Job summary

iServeU Technology Pvt. ltd. is seeking a Senior Information Security Engineer to design, implement, and maintain security controls across infrastructure, applications, and cloud environments.

You will protect data, systems, and networks from evolving cyber threats and lead incident response, risk management, and governance activities. The ideal candidate has hands-on cybersecurity knowledge and governance experience, with background in SOC, VAPT, GRC, security audits, and regulatory compliance.

Qualifications

• BE / B.Tech in relevant field.
• 3–5 years in Information Security / Cybersecurity.
• Security or compliance certifications preferred.

Responsibilities

• Design, implement, and review secure network, infrastructure, application, and cloud security architectures.
• Manage SIEM and security operations with Wazuh; monitor and investigate security events.
• Conduct VAPT, red team operations, and exploit validation across web, API, mobile, and cloud environments.
• Perform security testing for mobile apps following OWASP practices.
• Support GRC, regulatory audits, and certification audits (ISO 27001, PCI DSS, SOC, RBI, NPCI).
• Coordinate with cross-functional teams to remediate identified security gaps.

Skills

Security Monitoring

Incident Response

Regulatory Compliance

Vulnerability Assessment

Risk Remediation

Governance Framework

Third-Party Security

PCI DSS Compliance

Audit Support

Education

BE / B.Tech

Tools

Wazuh

Job description

iServeU Technology Pvt. ltd. is seeking a Senior Information Security Engineer to design, implement, and maintain security controls across infrastructure, applications, and cloud environments.

You will protect data, systems, and networks from evolving cyber threats and lead incident response, risk management, and governance activities. The ideal candidate has hands-on cybersecurity knowledge and governance experience, with background in SOC, VAPT, GRC, security audits, and regulatory compliance.