About us:

Yanolja Cloud Solution Pvt. Ltd. (YCS), is a global end-to-end hospitality technology provider specializing in innovative technology solutions for small and medium-sized accommodation businesses.

With 17+ years of experience and 400+ team members, YCS currently serves 33,000+ customers across 170+ countries. Our hospitality technology solutions support 50+ languages, backed by a 24/7 global support network.

YCS has local teams across 9+ countries, including India, Thailand, Indonesia, the Philippines, Sri Lanka, South Africa, Tanzania, Uganda and the USA, with our global presence continuing to expand.

About the Role:

Yanolja Cloud Solution Pvt. Ltd. is looking for an experienced Information Security Lead to lead and strengthen our security posture across SaaS products, applications, APIs, AWS/cloud infrastructure, internal systems and customer data.

This is a hands-on technical leadership role requiring strong expertise in Application Security, API Security, AWS Security, Incident Response, Vulnerability Management, Security Architecture and DevSecOps.

Key Responsibilities:

- Lead Application, API and SaaS security initiatives.
- Own AWS and cloud security reviews, including IAM, access controls, network security, S3, encryption and secrets management.
- Lead security incident investigation, containment and remediation.
- Own vulnerability management and drive critical/high-risk issues to closure.
- Establish and strengthen Secure SDLC and DevSecOps practices.
- Conduct security architecture and threat-modeling reviews.




- Review authentication, authorization, RBAC and multi-tenant security.
- Work closely with Engineering, DevOps, Infrastructure, QA and Product teams.
- Review penetration-testing findings and ensure effective remediation.
- Establish security standards, controls, procedures and security roadmap.
- Support security governance and compliance requirements including ISO 27001, SOC 2 and PCI DSS, where applicable.

Required Skills & Experience:

- 10+ years of qualified experience in Cybersecurity / Information Security.
- Strong hands-on experience in:
- Application Security
- API Security
- AWS / Cloud Security
- Incident Response
- Vulnerability Management
- Security Architecture
- DevSecOps
- Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
- Experience securing SaaS / multi-tenant applications.
- Strong understanding of IAM, RBAC, authentication, authorization and least privilege.
- Experience with SIEM, EDR, WAF, vulnerability management and application security tools.
- Experience working closely with Engineering and DevOps teams.
- Strong analytical, investigative and problem-solving skills.

Preferred Certifications

CISSP, CISM, OSCP, CCSP, AWS Certified Security – Specialty, GIAC, CEH or ISO 27001 certifications will be an added advantage.

Practical hands-on experience is more important than certifications.

Education

Bachelor's/Master's degree in Computer Science, IT, Cybersecurity, Information Security, Engineering or equivalent professional experience.

📌 Information Security Lead (Surat)
🏢 Yanolja Cloud Solution
📍 Surat