Information Security Engineer

Mumbai (On-site) | Full-time | Experience: 36 years

About the role

We're looking for a hands-on security professional to own the security of our internal systems, enterprise data and client data. You'll protect our infrastructure, investigate incidents, run regular security audits and build a security-aware culture across the team.

Key responsibilities

- Secure internal systems, servers, cloud environments and networks against unauthorized access and threats
- Implement and manage privileged access (PAM), role-based access controls and least-privilege policies
- Secure logins and identities through MFA, SSO, password policies and account lifecycle management
- Protect enterprise, company and client data through encryption, DLP controls, backups and data classification
- Deploy and manage endpoint security (EDR/antivirus, device management, patching) across all laptops, desktops and mobile devices
- Conduct security investigations, monitor logs and alerts, and perform root-cause analysis of incidents
- Run periodic security checkups, including vulnerability assessments, configuration reviews and access audits




- Lead incident response for data breaches: contain, mitigate, document and prevent recurrence
- Prevent data theft and data loss through monitoring, DLP and insider-threat controls
- Train employees on security best practices, phishing awareness and data handling policies
- Maintain security policies and support compliance with the DPDP Act 2023 and client security requirements

Requirements
- 3-6 years in information security, IT security or SOC roles
- Strong knowledge of IAM, PAM, endpoint security, SIEM and DLP tools
- Experience with Microsoft 365/Azure AD, Google Workspace or AWS security
- Hands-on experience with incident response and vulnerability assessment
- Understanding of data protection regulations (DPDP Act, GDPR, ISO 27001)
- Ability to explain security clearly to non-technical staff

Valuable to have
- Certifications: CEH, CompTIA Security+, CISSP, ISO 27001 LA or OSCP
- Experience at a data, SaaS or B2B services company

What we offer
- Ownership of the company's entire security function

📌 Information Security Engineer (Mumbai)
🏢 Demand Curve Marketing Systems
📍 Mumbai