Job Summary

This is an automation-first engineering role inside the security function. Your job is to make security, privacy, and compliance continuous by building the automation, integrations, and tooling that replace manual, repetitive work. Youll automate evidence collection and control checks for our compliance frameworks, automate identity and endpoint security tasks, and build internal security tooling that the Information Security Specialists and Privacy & Compliance Specialist rely on.

Note: This role is not a SOC / threat-hunting / incident-response analyst role (detection-and-response monitoring is handled through our managed MDR provider).

What You'll Drive

- Automate evidence collection, control checks, and reporting for SOC 2, ISO, and privacy frameworks so compliance is continuous rather than a once-a-year scramble.
- Build integrations and lightweight pipelines that connect security, IT, identity, and compliance tools via APIs.
- Automate identity and endpoint security tasks (access reviews, provisioning/deprovisioning checks, configuration and posture validation) in partnership with IT.
- Build and maintain internal security tooling, scripts, and toolsets that reduce manual effort for the security and privacy team.
- Stand up and use MCP servers / tools to connect AI workflows to internal systems safely.
- Build dashboards and alerting so control status, gaps, and evidence freshness are always visible.
- Document automations, runbooks, and configurations; build for reliability and safe failure.




- Partner with the Information Security Specialists and Privacy & Compliance Specialist (who define the controls) and with IT (who operate the systems).

How You'll Work with AI
- Use Claude Code, Python, and GCP to design and ship automations across multiple environments.
- Stand up and use MCP servers / tools to wire AI into internal systems safely.

What You Bring
- 1-3 years in security engineering, automation/DevOps, or software engineering with a security or compliance lean.
- Robust Python and scripting; solid understanding of APIs, integrations, and working across environments.
- Hands-on with a cloud platform (GCP preferred) and building lightweight pipelines.
- Comfort with AI-first development - Claude Code, and standing up MCP servers / tools / toolsets to wire AI into internal systems.
- Familiarity with compliance frameworks (SOC 2 and/or ISO 27001) and what "evidence" and "controls" mean in practice.
- Exposure to identity/access and endpoint concepts (SSO/IAM, MDM) is a strong plus.
- Solution mindset, attention to detail, and clear documentation habits.

Nice to Have
- Experience with compliance-automation / GRC platforms (e.g., Vanta, Drata, Sprinto) and their APIs.
- Exposure to IaC, Git, and CI/CD.
- Any relevant security or automation certification.

Disclaimer: This job description has been sourced from a public domain and may have been modified by Naukri.com to improve clarity for our users. We encourage job seekers to verify all details directly with the employer via their official channels before applying.

📌 Security and Automation Engineer (Pune)
🏢 Mindtickle
📍 Pune