JOB DESCRIPTION

Cyber Security & Infrastructure Engineer

Experience 1.5 to 2 years

Department IT / Information Security

Employment Type Full-Time

Industry Fintech / NBFC

Location Ahmedabad, Gujarat

About the Role

We are looking for a proactive Cyber Security & Infrastructure Engineer with 1.5 years or more of relevant experience in IT infrastructure, cybersecurity operations, network security, system administration, and security monitoring. The candidate will help maintain a secure and reliable technology workplace by implementing security controls, monitoring infrastructure, managing vulnerabilities, and supporting applicable regulatory and audit requirements.

Key Responsibilities

Cybersecurity Operations

- Monitor security alerts, system logs, and suspicious activities to identify potential threats.
- Support vulnerability assessments, penetration testing coordination, and remediation tracking.
- Help protect sensitive customer information, personally identifiable information (PII), and financial data.
- Support endpoint protection (antivirus/EDR), firewall, and intrusion detection/prevention controls.
- Assist with security incident investigation, documentation, escalation, and root cause analysis.
- Support Data Loss Prevention (DLP) controls to reduce unauthorized data sharing or transfers.

IT Infrastructure & Network Security

- Administer and monitor servers, operating systems, network devices, and cloud infrastructure.
- Support firewall rules, VPNs, access controls, network segmentation, and secure remote access.
- Perform system hardening, security patching, and operating system updates.
- Monitor infrastructure availability, performance, backups, and security configurations.
- Support cloud security and identity/access management in platforms such as Oracle Cloud, AWS, or Azure.
- Assist with backup, disaster recovery (DR), and business continuity (BCP) activities.

Identity & Access Management

- Manage user access provisioning, modification, and deactivation based on approved requests.




- Support role-based access control (RBAC), least privilege, and multi-factor authentication (MFA).
- Conduct periodic access reviews and identify inactive, excessive, or privileged access.

Security Compliance & Audit

- Support cybersecurity and IT control requirements applicable to an RBI-regulated NBFC.
- Assist with internal/external audits, VAPT, evidence collection, and audit response.
- Maintain asset inventories, access review records, patch reports, incident logs, and security documentation.
- Track audit observations and coordinate timely remediation with relevant teams and vendors.

Monitoring, Reporting & Incident Response

- Monitor events using available SIEM, EDR, firewall, and infrastructure monitoring tools.
- Escalate critical security incidents and infrastructure issues promptly.
- Prepare periodic reports on vulnerabilities, patch compliance, access reviews, security alerts, and infrastructure health.
- Coordinate with development, infrastructure, and third-party vendor teams to resolve security issues.

Required Technical Skills

- Networking: TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and firewall fundamentals.
- Operating Systems: Windows Server and Linux administration.
- Security Tools: Exposure to firewalls, antivirus/EDR, vulnerability scanners, and SIEM platforms.
- Infrastructure: Server administration, patch management, backup solutions, and basic cloud security.
- Security Fundamentals: Vulnerability management, system hardening, access control, incident response, and log analysis.
- Cloud Platforms: Basic knowledge of Oracle Cloud Infrastructure (OCI), AWS, or Microsoft Azure.
- Scripting: Basic Python,



PowerShell, or Bash scripting is an advantage.
- Documentation: Ability to maintain technical documentation, security reports, and audit evidence.

Qualifications & Experience

- Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum 1.5 years of relevant experience in cybersecurity, IT infrastructure, network administration, or information security operations.
- Certifications such as CompTIA Security+, CCNA, Microsoft Security, or cloud security certifications are preferred, not mandatory.

Preferred Candidate Profile

- Strong troubleshooting, analytical, and problem-solving skills.
- Understanding of confidentiality and secure handling of customer information.
- Ability to coordinate with internal teams, auditors, and external technology vendors.
- Proactive approach to identifying and resolving security risks.
- Good communication, documentation, and incident reporting skills.

Preferred Certifications
CompTIA Security+
Certified Ethical Hacker (CEH)
ISO 27001 Lead Implementer

Key Performance Indicators (KPIs)

- Timely identification, tracking, and remediation of vulnerabilities.
- Security patch compliance across servers and endpoints.
- Timely closure of security audit observations.
- Completion of access reviews and appropriate privileged account controls.
- Timely detection, escalation, and documentation of security incidents.
- Monitoring of backup jobs and participation in recovery tests.
- Adherence to approved security policies and infrastructure hardening standards.

Note: The role supports the organization’s cybersecurity and infrastructure controls in line with applicable regulatory requirements, internal policies, and the organization’s risk profile.

Pay: ₹400,000.00 - ₹800,000.00 per year

Benefits:

- Flexible schedule
- Health insurance
- Paid sick time
- Provident Fund
- Work from home

Work Location: In person

📌 Cyber Security & Infrastructure Engineer (Thaltej)
🏢 Chinmay Finlease
📍 Thaltej