About the role

You will own the security of our internal corporate environment: identity, endpoints and SaaS. This is a hands-on engineering role with a strong focus on automation. You will not just be monitoring logs. You will be architecting the security fabric that enables our rapid growth. You will report into the CISO organization and partner closely with IT, HR, Legal, Compliance, and our Cloud and Application Security teams.

What you will do

Identity-centric security

- Help design and implement passwordless authentication (FIDO2/WebAuthn) and Zero Trust principles
- Manage secure provisioning and lifecycle management, ensuring least-privilege access across business systems
- Partner with HR and IT to streamline onboarding and offboarding workflows, with timely access revocation and auditability

Endpoint and infrastructure security

- Define and enforce security baselines for Windows, macOS and mobile devices via Intune and Jamf
- Manage and tune EDR/XDR solutions for high-fidelity detection on workstations and servers
- Secure the corporate Azure footprint (subscriptions, networking, resources), separate from the production environment
- Coordinate vulnerability and patch management, and automate endpoint compliance checks and remediation

Detection, response and automation

- Lead incident response for corporate security events (phishing, malware, lost devices)
- Build automation in Python and PowerShell and SOAR workflows to reduce manual work, collect evidence and drive response actions
- Proactively hunt for threats across the corporate network and identity providers
- Develop incident response playbooks, including forensics collection procedures

SaaS security,



compliance and collaboration

- Assess and secure third-party SaaS integrations, browser extensions and productivity tools to prevent data leakage and over-privileged access
- Configure and maintain CASB and DLP policies without hindering productivity
- Support and automate audit evidence collection, and help vet new vendors with Legal and Compliance
- Act as the primary security liaison to IT and business teams, and deliver security awareness and training programs
- Support the development and maintenance of Infrastructure-as-Code

What you bring

- 8+ years of hands-on experience in Corporate Security, IT Security Engineering or a SOC role in a cloud-first setting
- Hands-on experience with Microsoft Entra ID and/or Okta (Conditional Access, SSO, SCIM, SAML/OIDC)
- Strong endpoint hardening experience (Windows/macOS) and MDM/UEM management (Intune/Jamf)
- Experience tuning EDR tools and analyzing SIEM logs
- Proficiency in Python and/or PowerShell, and Terraform, for automating APIs and security workflows
- Proven experience helping IT and business teams with vulnerability and patch management
- Excellent English communication, with the ability to explain complex risks to non-technical stakeholders
- Ability to influence and drive security best practices across non-security teams

Nice to have

- FIDO2/WebAuthn (passwordless) implementation experience
- Experience securing Azure/AWS for internal corporate workloads
- Familiarity with ISO 27001/27701 and SOC 2
- Experience with security awareness and phishing simulation platforms
- Background in a SaaS company, startup or scale-up

Write to [email protected] to get connected!

📌 Senior Security Engineer | Identity | Endpoint | Automation | Corporate IT Security (Bengaluru)
🏢 CareerXperts Consulting
📍 Bengaluru