Traydstream is seeking an Information Security Engineer to implement and improve security controls across cloud infrastructure, SaaS applications and internal enterprise systems. This is a hands-on individual contributor role focused on cloud security, application security, identity controls, vulnerability management, security monitoring and practical remediation support.

Responsibilities

- Implement and improve security controls across Multi cloud environments, production systems and internal enterprise platforms.

- Support cloud and application security reviews, identify security gaps and work with teams to drive practical remediation.

- Embed security into the SDLC by supporting secure design, application security testing and vulnerability remediation.

- Review application, API and infrastructure risks arising from internal scans, penetration tests and client security findings.

- Strengthen enterprise security across identity, endpoint, email, Microsoft 365 and privileged access controls.

- Monitor security alerts, investigate events and support incident response using SIEM, EDR, cloud and identity security tools.

- Improve detection rules, dashboards, playbooks and repeatable workflows to enhance monitoring and response quality.

- Automate routine security checks, reporting and control validation using PowerShell, Python or similar scripting tools.

- Secure AI/ML workloads and use AI-driven approaches to streamline security reviews, monitoring, reporting and remediation workflows.

- Work with Engineering,



DevOps, IT, Product and Compliance teams to communicate risks clearly and support timely remediation.

Your Skills And Experience

- Experience: 5 to 8 years of hands-on information security engineering experience, preferably in SaaS, technology or regulated environments.

- Cloud security: Practical experience securing Azure environments, including IAM, network security, logging, secure configuration and data protection.

- Application security: Working knowledge of OWASP Top 10, API security, secure SDLC, application testing and vulnerability remediation.

- Identity and enterprise security: Hands-on experience with Microsoft Entra ID, MFA, Conditional Access, endpoint security, Microsoft 365 security and privileged access controls.

- Security operations: Ability to investigate alerts, analyse logs, tune detections and support incident response.

- Automation: Ability to use PowerShell, Python or similar scripting languages to automate security tasks and reporting.

- AI security: Practical awareness of securing AI/ML workloads, protecting sensitive data and using AI securely to improve security workflows.

- Certifications: Azure Security Engineer Associate, Security Operations Analyst Associate, CISSP, CCSP, Security+ or equivalent certification is preferred.

- Communication and execution: Transparent communicator, self-driven, detail-oriented and able to deliver practical security outcomes across multiple priorities.

📌 Information Security Engineer (Gurugram)
🏢 Traydstream
📍 Gurugram