About the Role

We are looking for a proactive Cyber Security &

- Infrastructure Engineer with 1.5 years or more of relevant experience in IT infrastructure, cybersecurity operations, network security, system administration, and security monitoring. The candidate will help maintain a secure and reliable technology environment by implementing security controls, monitoring infrastructure, managing vulnerabilities, and supporting applicable regulatory and audit requirements.

Key Responsibilities

- Cybersecurity Operations

- Monitor security alerts, system logs, and suspicious activities to identify potential threats.

- Support vulnerability assessments, penetration testing coordination, and remediation tracking.

- Help protect sensitive customer information, personally identifiable information (PII), and financial data.

- Support endpoint protection (antivirus/EDR), firewall, and intrusion detection/prevention controls.

- Assist with security incident investigation, documentation, escalation, and root cause analysis.

- Support Data Loss Prevention (DLP) controls to reduce unauthorized data sharing or transfers.

- IT Infrastructure &
- Network Security

- Administer and monitor servers, operating systems, network devices, and cloud infrastructure.

- Support firewall rules, VPNs, access controls, network segmentation, and secure remote access.

- Perform system hardening, security patching, and operating system updates.

- Monitor infrastructure availability, performance, backups, and security configurations.

- Support cloud security and identity/access management in platforms such as Oracle Cloud, AWS, or Azure.

- Assist with backup, disaster recovery (DR), and business continuity (BCP) activities.

- Identity &

- Access Management

- Manage user access provisioning, modification, and deactivation based on approved requests.

- Support role-based access control (RBAC), least privilege,



and multi-factor authentication (MFA).

- Conduct periodic access reviews and identify inactive, excessive, or privileged access.

- Security Compliance &

- Audit

- Support cybersecurity and IT control requirements applicable to an RBI-regulated NBFC.

- Assist with internal/external audits, VAPT, evidence collection, and audit response.

- Maintain asset inventories, access review records, patch reports, incident logs, and security documentation.

- Track audit observations and coordinate timely remediation with relevant teams and vendors.

- Monitoring, Reporting &

- Incident Response

- Monitor events using available SIEM, EDR, firewall, and infrastructure monitoring tools.

- Escalate critical security incidents and infrastructure issues promptly.

- Prepare periodic reports on vulnerabilities, patch compliance, access reviews, security alerts, and infrastructure health.

- Coordinate with development, infrastructure, and third-party vendor teams to resolve security issues.

Required Technical Skills

- Networking: TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and firewall fundamentals.

- Operating Systems: Windows Server and Linux administration.

- Security Tools: Exposure to firewalls, antivirus/EDR, vulnerability scanners, and SIEM platforms.

- Infrastructure: Server administration, patch management, backup solutions, and basic cloud security.

- Security Fundamentals: Vulnerability management, system hardening, access control, incident response, and log analysis.





- Cloud Platforms: Basic knowledge of Oracle Cloud Infrastructure (OCI), AWS, or Microsoft Azure.

- Scripting: Basic Python, PowerShell, or Bash scripting is an advantage.

- Documentation: Ability to maintain technical documentation, security reports, and audit evidence.

Qualifications &

- Experience

- Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.

- Minimum 1.5 years of relevant experience in cybersecurity, IT infrastructure, network administration, or information security operations.

- Certifications such as CompTIA Security+, CCNA, Microsoft Security, or cloud security certifications are preferred, not mandatory.

Preferred Candidate Profile

- Strong troubleshooting, analytical, and problem-solving skills.

- Understanding of confidentiality and secure handling of customer information.

- Ability to coordinate with internal teams, auditors, and external technology vendors.

- Proactive approach to identifying and resolving security risks.

- Positive communication, documentation, and incident reporting skills.

Key Performance Indicators (KPIs)

- Timely identification, tracking, and remediation of vulnerabilities.

- Security patch compliance across servers and endpoints.

- Timely closure of security audit observations.

- Completion of access reviews and appropriate privileged account controls.

- Timely detection, escalation, and documentation of security incidents.

- Monitoring of backup jobs and participation in recovery tests.

- Adherence to approved security policies and infrastructure hardening standards.

Note: The role supports the organization’s cybersecurity and infrastructure controls in line with applicable regulatory requirements, internal policies, and the organization’s risk profile.

📌 Cyber Security & Infrastructure Engineer (Ahmedabad)
🏢 Chinmay Finlease
📍 Ahmedabad