:

ACCEPTING APPLICATIONS FROM BANGALORE BASED CANDIDATES ONLY. LOOKING FOR IMMEDIATE JOINERS.

How You Will Make an Impact:

- Design, implement, and maintain security controls across cloud infrastructure, applications, and network environments.
- Conduct vulnerability assessments, penetration testing, and threat modeling to proactively identify and remediate security risks.
- Monitor security events and alerts using SIEM tooling, investigating incidents and driving timely remediation.
- Partner with Cloud Engineering, DevOps, and application teams to embed security best practices into CI/CD pipelines and infrastructure-as-code workflows.
- Support the development and enforcement of security policies, standards, and compliance frameworks (e.g., SOC 2, NIST CSF, PCI-DSS).
- Lead or contribute to security incident response activities, including root cause analysis and post-incident reviews.
- Implement and manage identity and access management (IAM) controls, including least-privilege enforcement, privileged access management, and conditional access policies; enforce network and host-based data loss prevention (DLP), information protection, and endpoint security controls across the enterprise setting.
- Evaluate and manage third-party security tools and vendor risk assessments; conduct security reviews of end user applications and software to support an approved software process, ensuring only vetted and compliant tools are introduced into the environment.
- Drive automation of security operations broadly, including testing, compliance checks, threat detection, triage, and response workflows; leverage AI-assisted tooling to accelerate analysis, reduce manual effort,



and increase coverage across the security program.
- Maintain accurate and thorough security documentation including runbooks, threat models, and risk registers.
- Act as a security subject matter expert, advising engineering and product teams on secure design and coding practices.
- Proactively track emerging threats, vulnerabilities, and industry trends.
- Train and develop team members on security and compliance practices, tools, and frameworks, fostering a culture of security awareness and continuous improvement.

What You Need to Be Successful:

- 5+ years of experience in information security, cybersecurity engineering, or a related technical discipline.
- 3+ years of hands-on experience securing cloud environments (AWS preferred), including IAM, VPC security, security groups, and cloud-native security services (e.g., AWS GuardDuty, Security Hub, CloudTrail).
- Experience with SIEM platforms and security event monitoring, alerting, and incident response workflows.
- Proficiency in vulnerability management tools and processes, including experience conducting or coordinating penetration testing.
- Solid understanding of network security concepts including firewalls, WAFs, IDS/IPS, DNS security, and zero-trust principles.
- Experience with identity and access management including SSO, MFA, OAuth,



and privileged access management (PAM) solutions.
- Hands-on experience integrating security into CI/CD pipelines (DevSecOps), including static/dynamic analysis tools and secrets management.
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF v2.0, PCI-DSS, and their technical implementation requirements; working knowledge of AI-specific frameworks (e.g., NIST AI RMF, ISO 42001) is a plus.
- Working knowledge of data privacy regulations and their operational security implications, including GDPR and CCPA.
- Hands-on experience implementing and managing conditional access policies, network and host-based DLP, information protection classifications, and endpoint security controls within an enterprise security platform.
- Scripting or automation experience (Python, Bash, or similar) for security tooling and workflow automation; comfort leveraging AI-assisted tools to enhance and accelerate security operations, analysis, and process development.
- Strong Linux administration skills, preferably with RHEL-based systems.
- Excellent analytical and problem-solving skills with the ability to assess complex risk scenarios and communicate findings clearly.
- Strong written and verbal communication skills, with ability to present technical security concepts to non-technical stakeholders.
- Experience mentoring or developing junior security team members, or demonstrated ability to contribute to team capability growth through training, knowledge transfer, or documentation.
- Relevant security certifications such as CISSP, CISM, OSCP, AWS Security Specialty, or equivalent are a plus.

📌 Senior Security Engineer - SIEM/iAM (India)
🏢 Huray Consulting
📍 India