16 Aug
|
Bounteous
|
Bengaluru
16 Aug
Bounteous
Bengaluru
About the Role
We are looking for a Senior Security Engineer to strengthen and operate our security architecture, which is organized around the NIST Cybersecurity Framework (CSF) 2.0.
This is a hands-on engineering role at the center of the security program. You will own day-to-day operation of core security tooling, drive vulnerability and findings remediation across engineering teams, harden identity and access controls, and produce the control evidence supporting HIPAA (and, where applicable, other regulatory frameworks such as SOX) compliance obligations. You will work closely with DevOps/Engineering, IT, the Compliance/GRC function, and any managed security services partner.
What You Will Do
- Operate and continuously improve the security stack: WAF policy tuning, cloud posture and vulnerability triage, log-source onboarding to the SIEM, and EDR coverage.
- Own the findings lifecycle: review penetration test, SIEM, and posture-management findings in a central register, assign to accountable owners, and drive remediation within defined severity-based SLAs (e.g., Critical:
plan within 1 day, resolve within 3 days).
- Harden identity and access management: MFA enforcement across critical systems, access provisioning/deprovisioning workflows, privileged access restriction, and periodic access recertification.
- Support regulatory control remediation (e.g., HIPAA, SOX ITGC): partner with Engineering and IT to close audit findings in user access management, change management, dev/production segregation, and job/interface monitoring.
- Extend detection coverage: onboard application logs into the SIEM, close monitoring gaps, and partner with the SOC (in-house or managed) on alert triage, escalation, and incident response.
- Verify and document WAF/CDN placement and consistent edge protection across all hosted applications and service APIs.
- Contribute to resilience: validate backup monitoring for core databases, support disaster-recovery tiering (RTO/RPO) completio
📌 Security Engineer (Bengaluru)
🏢 Bounteous
📍 Bengaluru